CVE-2022-2384

MEDIUM 4.8CVE-2022-2384 · Published 15/08/2022 · updated 17/06/2026

In short

CVE-2022-2384 is a MEDIUM (CVSS 4.8) vulnerability affecting digital publications by supsystic (supsystic).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.8% of all vulnerabilities.
Fix: update to 1.7.4 or later.

Package	Affected versions	Patched versions
digital publications by supsystic supsystic	`< 1.7.4`	`1.7.4`

Description

The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

References

wpscan.com/vulnerability/0917b964-f347-487e-b8d7-c4f09c290fe5 · Exploit

More vulnerabilities in digital publications by supsystic

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free