Update CVE-2022-1906.yaml

patch-1
Prince Chaddha 2022-08-03 18:48:58 +05:30 committed by GitHub
parent 28576f0b2c
commit 96c470bbbb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 2 deletions

View File

@ -7,11 +7,11 @@ info:
description: |
The plugin does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled.
reference:
- https://wpscan.com/vulnerability/af4f459e-e60b-4384-aad9-0dc18aa3b338
- https://nvd.nist.gov/vuln/detail/CVE-2022-1906
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-1906
- https://wpscan.com/vulnerability/af4f459e-e60b-4384-aad9-0dc18aa3b338
metadata:
verified: "true"
verified: true
google-dork: inurl:/wp-content/plugins/digiproveblog
tags: cve,cve2022,wordpress,xss,wp-plugin,wp