Vulnerability Details CVE-2022-25604
Authenticated (contributor of higher user role) Stored Cross-Site Scripting (XSS) vulnerability discovered in WordPress Price Table plugin (versions <= 0.2.2).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 46.1%
CVSS Severity
CVSS v3 Score 4.1
CVSS v2 Score 3.5
References
- https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/pricetable/
- https://patchstack.com/database/vulnerability/pricetable/wordpress-price-table-plugin-0-2-2-stored-cross-site-scripting-xss-vulnerability
- https://wordpress.org/plugins/pricetable/
Products affected by CVE-2022-25604
-
cpe:2.3:a:price_table_project:price_table:-
-
cpe:2.3:a:price_table_project:price_table:0.2.2