CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4299

The Metricool WordPress plugin before 1.18 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 25.4%

CVSS Severity

CVSS v3 Score 4.8

References

Products affected by CVE-2022-4299

Metricool » Metricool » Version: N/A

cpe:2.3:a:metricool:metricool:-
Metricool » Metricool » Version: 1.0

cpe:2.3:a:metricool:metricool:1.0
Metricool » Metricool » Version: 1.1

cpe:2.3:a:metricool:metricool:1.1
Metricool » Metricool » Version: 1.10

cpe:2.3:a:metricool:metricool:1.10
Metricool » Metricool » Version: 1.11

cpe:2.3:a:metricool:metricool:1.11
Metricool » Metricool » Version: 1.12

cpe:2.3:a:metricool:metricool:1.12
Metricool » Metricool » Version: 1.13

cpe:2.3:a:metricool:metricool:1.13
Metricool » Metricool » Version: 1.14

cpe:2.3:a:metricool:metricool:1.14
Metricool » Metricool » Version: 1.15

cpe:2.3:a:metricool:metricool:1.15
Metricool » Metricool » Version: 1.16

cpe:2.3:a:metricool:metricool:1.16
Metricool » Metricool » Version: 1.17

cpe:2.3:a:metricool:metricool:1.17
Metricool » Metricool » Version: 1.2

cpe:2.3:a:metricool:metricool:1.2
Metricool » Metricool » Version: 1.3

cpe:2.3:a:metricool:metricool:1.3
Metricool » Metricool » Version: 1.4

cpe:2.3:a:metricool:metricool:1.4
Metricool » Metricool » Version: 1.5

cpe:2.3:a:metricool:metricool:1.5
Metricool » Metricool » Version: 1.6

cpe:2.3:a:metricool:metricool:1.6
Metricool » Metricool » Version: 1.7

cpe:2.3:a:metricool:metricool:1.7
Metricool » Metricool » Version: 1.9

cpe:2.3:a:metricool:metricool:1.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4299

Products

Pricing

Contact Us