CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4789

The WPZOOM Portfolio WordPress plugin before 1.2.2 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 29.2%

CVSS Severity

CVSS v3 Score 5.4

References

Products affected by CVE-2022-4789

Wpzoom » Wpzoom Portfolio » Version: N/A

cpe:2.3:a:wpzoom:wpzoom_portfolio:-
Wpzoom » Wpzoom Portfolio » Version: 1.0.0

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.0.0
Wpzoom » Wpzoom Portfolio » Version: 1.0.1

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.0.1
Wpzoom » Wpzoom Portfolio » Version: 1.0.2

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.0.2
Wpzoom » Wpzoom Portfolio » Version: 1.0.3

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.0.3
Wpzoom » Wpzoom Portfolio » Version: 1.0.4

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.0.4
Wpzoom » Wpzoom Portfolio » Version: 1.0.5

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.0.5
Wpzoom » Wpzoom Portfolio » Version: 1.1.0

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.1.0
Wpzoom » Wpzoom Portfolio » Version: 1.2.0

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.2.0
Wpzoom » Wpzoom Portfolio » Version: 1.2.1

cpe:2.3:a:wpzoom:wpzoom_portfolio:1.2.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-4789

Products

Pricing

Contact Us