CVE-2022-45082

Multiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key.
Configurations

Configuration 1 (hide)

cpe:2.3:a:oxilab:accordions:*:*:*:*:*:wordpress:*:*

History

21 Nov 2024, 07:28

Type Values Removed Values Added
References () https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-3-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve - Third Party Advisory () https://patchstack.com/database/vulnerability/accordions-or-faqs/wordpress-accordions-plugin-2-0-3-multiple-auth-stored-cross-site-scripting-xss-vulnerabilities?_s_id=cve - Third Party Advisory
References () https://wordpress.org/plugins/accordions-or-faqs/#developers - Release Notes, Third Party Advisory () https://wordpress.org/plugins/accordions-or-faqs/#developers - Release Notes, Third Party Advisory
CVSS v2 : unknown
v3 : 4.8
v2 : unknown
v3 : 3.4

Information

Published : 2022-11-18 23:15

Updated : 2024-11-21 07:28


NVD link : CVE-2022-45082

Mitre link : CVE-2022-45082

CVE.ORG link : CVE-2022-45082


JSON object : View

Products Affected

oxilab

  • accordions
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')