CVE-2022-47171

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-47171
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions.

4.8 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.7 / Impact : 2.7

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact NONE

Scope CHANGED

References
Link Resource
https://patchstack.com/database/vulnerability/ip-vault-wp-firewall/wordpress-ip-vault-wp-firewall-plugin-1-1-cross-site-scripting-xss?_s_id=cve Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:ip_vault_-_wp_firewall_project:ip_vault_-_wp_firewall:*:*:*:*:*:wordpress:*:*
History

07 Nov 2023, 03:56

Type Values Removed Values Added
Summary Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions. Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions.
Information

Published : 2023-03-14 07:15

Updated : 2023-11-07 03:56

NVD link : CVE-2022-47171

Mitre link : CVE-2022-47171

JSON object : View

Products Affected

ip_vault_-_wp_firewall_project

  • ip_vault_-_wp_firewall
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')