CVE-2022-4667

 

Published at: - 30-01-2023 10:15

Last modified: - 30-01-2023 10:15

Total changes: - 1

Description

The RSS Aggregator by Feedzy WordPress plugin before 4.1.1 does not validate and escape some of its block options before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Common Vulnerability Scoring System (CVSS)

-

 

Verification logic

 

Reference

• https://wpscan.com/vulnerability/a388232b-a399-46a5-83e6-20c1b5df351d

 

Keywords

NVD

 

CVE-2022-4667

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures