CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1644

The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.1%

CVSS Severity

CVSS v3 Score 4.8

CVSS v2 Score 3.5

References

Products affected by CVE-2022-1644

Call&book Mobile Bar Project » Call&book Mobile Bar » Version: N/A

cpe:2.3:a:call&book_mobile_bar_project:call&book_mobile_bar:-
Call&book Mobile Bar Project » Call&book Mobile Bar » Version: 1.1

cpe:2.3:a:call&book_mobile_bar_project:call&book_mobile_bar:1.1
Call&book Mobile Bar Project » Call&book Mobile Bar » Version: 1.1.1

cpe:2.3:a:call&book_mobile_bar_project:call&book_mobile_bar:1.1.1
Call&book Mobile Bar Project » Call&book Mobile Bar » Version: 1.2

cpe:2.3:a:call&book_mobile_bar_project:call&book_mobile_bar:1.2
Call&book Mobile Bar Project » Call&book Mobile Bar » Version: 1.2.1

cpe:2.3:a:call&book_mobile_bar_project:call&book_mobile_bar:1.2.1
Call&book Mobile Bar Project » Call&book Mobile Bar » Version: 1.2.2

cpe:2.3:a:call&book_mobile_bar_project:call&book_mobile_bar:1.2.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-1644

Products

Pricing

Contact Us