PT-2023-14044 · WordPress · Tcbarrett Glossary

Thiennv · Published 2023-03-21 · Updated 2023-03-24 · CVE-2022-41831

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions TCBarrett WP Glossary plugin versions prior to 3.1.2

Description A Cross-Site Scripting issue affects the TCBarrett WP Glossary plugin, allowing unauthorized access for users with contributor or higher permissions.

Recommendations For TCBarrett WP Glossary plugin versions prior to 3.1.2, update to a version newer than 3.1.2 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-41831

Affected Products

Tcbarrett Glossary

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2022-41831 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41831 · Vendor Advisory
• https://patchstack.com/database/vulnerability/wp-glossary/wordpress-wp-glossary-plugin-3-1-2-auth-stored-cross-site-scripting-xss-vulnerability?_s_id=cve · Note