CVE-2022-1842

MEDIUM 4.3CVE-2022-1842 · Published 27/06/2022 · updated 17/06/2026

In short

CVE-2022-1842 is a MEDIUM (CVSS 4.3) vulnerability affecting openbook book data (openbook book data project).
Chance of exploitation in the next 30 days (EPSS): 0.43%, higher than 37.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
openbook book data openbook_book_data_project	`≤ 3.5.2`	No fix yet

Description

The OpenBook Book Data WordPress plugin through 3.5.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored Cross-Site Scripting due to the lack of sanitisation and escaping as well

References

wpscan.com/vulnerability/77aafeb9-af80-490a-b3d7-4fa973bab61c · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free