CVE-2022-3832

MEDIUM 4.8CVE-2022-3832 · Published 19/12/2022 · updated 17/06/2026

In short

CVE-2022-3832 is a MEDIUM (CVSS 4.8) vulnerability affecting external media (external media project).
Chance of exploitation in the next 30 days (EPSS): 0.49%, higher than 42.5% of all vulnerabilities.
Fix: update to 1.0.36 or later.

Package	Affected versions	Patched versions
external media external_media_project	`< 1.0.36`	`1.0.36`

Description

The External Media WordPress plugin before 1.0.36 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

References

wpscan.com/vulnerability/458ec2fd-4175-4cb4-b334-b63f6e643b92 · Exploit

More vulnerabilities in external media

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free