CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4715

The Structured Content WordPress plugin before 1.5.1 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 37.5%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2022-4715

Wpsc-Plugin » Structured Content » Version: 1.0.0

cpe:2.3:a:wpsc-plugin:structured_content:1.0.0
Wpsc-Plugin » Structured Content » Version: 1.2.0

cpe:2.3:a:wpsc-plugin:structured_content:1.2.0
Wpsc-Plugin » Structured Content » Version: 1.3.0

cpe:2.3:a:wpsc-plugin:structured_content:1.3.0
Wpsc-Plugin » Structured Content » Version: 1.3.1

cpe:2.3:a:wpsc-plugin:structured_content:1.3.1
Wpsc-Plugin » Structured Content » Version: 1.4.0

cpe:2.3:a:wpsc-plugin:structured_content:1.4.0
Wpsc-Plugin » Structured Content » Version: 1.4.1

cpe:2.3:a:wpsc-plugin:structured_content:1.4.1
Wpsc-Plugin » Structured Content » Version: 1.4.2

cpe:2.3:a:wpsc-plugin:structured_content:1.4.2
Wpsc-Plugin » Structured Content » Version: 1.4.3

cpe:2.3:a:wpsc-plugin:structured_content:1.4.3
Wpsc-Plugin » Structured Content » Version: 1.4.4

cpe:2.3:a:wpsc-plugin:structured_content:1.4.4
Wpsc-Plugin » Structured Content » Version: 1.4.5

cpe:2.3:a:wpsc-plugin:structured_content:1.4.5
Wpsc-Plugin » Structured Content » Version: 1.4.6

cpe:2.3:a:wpsc-plugin:structured_content:1.4.6
Wpsc-Plugin » Structured Content » Version: 1.5

cpe:2.3:a:wpsc-plugin:structured_content:1.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4715

Products

Pricing

Contact Us