diff --git a/cves/2022/CVE-2022-0218.yaml b/cves/2022/CVE-2022-0218.yaml index c745bccfd6..0d6fb350ba 100644 --- a/cves/2022/CVE-2022-0218.yaml +++ b/cves/2022/CVE-2022-0218.yaml @@ -1,10 +1,10 @@ id: CVE-2022-0218 info: - name: HTML Email Template Designer < 3.1 - Stored Cross-Site Scripting (XSS) + name: HTML Email Template Designer < 3.1 - Stored Cross-Site Scripting author: hexcat severity: medium - description: WordPress Email Template Designer WP HTML Mail allows stored XSS through an unprotected REST-API endpoint (CVE-2022-0218). + description: WordPress Email Template Designer WP HTML Mail allows stored cross-site scripting through an unprotected REST-API endpoint. reference: - https://www.wordfence.com/blog/2022/01/unauthenticated-xss-vulnerability-patched-in-html-email-template-designer-plugin/ - https://wordpress.org/plugins/wp-html-mail/ @@ -38,3 +38,5 @@ requests: - type: status status: - 200 + +# Enhanced by mp on 2022/02/28