CVE-2022-36796

MEDIO 6.1CVE-2022-36796 · Published 01/09/2022 · updated 17/06/2026

In breve

CVE-2022-36796 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda callrail phone call tracking (callrail).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.38%, superiore al 31.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
callrail phone call tracking callrail	`≤ 0.4.9`	No fix yet

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at WordPress.

References

patchstack.com/database/vulnerability/callrail-phone-call-tracking/wordpress-callrail-phone-call-tracking-plugin-0-4-9-cross-site-request-forgery-csrf-vulnerability-leading-to-stored-cross-site-scripting-xss · Third Party Advisory
wordpress.org/plugins/callrail-phone-call-tracking · Product

Altre vulnerabilità di callrail phone call tracking

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free