WordPress Ezoic plugin <= 2.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
CVE-2022-41315

4.8MEDIUM

Key Information:

Vendor: Wordpress
Status: Ezoic (WordPress Plugin)
Vendor: CVE Published:; 17 November 2022

Summary

Auth. Stored Cross-Site Scripting (XSS) vulnerability in Ezoic plugin <= 2.8.8 on WordPress.

Affected Version(s)

Ezoic (WordPress plugin) <= 2.8.8 <= 2.8.8

References

https://patchstack.com/database/vulnerability/ezoic-integ...

CVSS V3.1

Score:

4.8

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

High

User Interaction:

Required

Scope:

Changed

Timeline

Vulnerability published
Nov 17, 2022
Vulnerability Reserved
Sep 27, 2022

Credit

Vulnerability discovered by José Aguilera (Patchstack Alliance)

.