CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4486

The Meteor Slides WordPress plugin before 1.5.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 35.2%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2022-4486

Meteor Slides Project » Meteor Slides » Version: N/A

cpe:2.3:a:meteor_slides_project:meteor_slides:-
Meteor Slides Project » Meteor Slides » Version: 1.5

cpe:2.3:a:meteor_slides_project:meteor_slides:1.5
Meteor Slides Project » Meteor Slides » Version: 1.5.1

cpe:2.3:a:meteor_slides_project:meteor_slides:1.5.1
Meteor Slides Project » Meteor Slides » Version: 1.5.2

cpe:2.3:a:meteor_slides_project:meteor_slides:1.5.2
Meteor Slides Project » Meteor Slides » Version: 1.5.3

cpe:2.3:a:meteor_slides_project:meteor_slides:1.5.3
Meteor Slides Project » Meteor Slides » Version: 1.5.4

cpe:2.3:a:meteor_slides_project:meteor_slides:1.5.4
Meteor Slides Project » Meteor Slides » Version: 1.5.5

cpe:2.3:a:meteor_slides_project:meteor_slides:1.5.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4486

Products

Pricing

Contact Us