CVE-2022-4826

MEDIO 5.4CVE-2022-4826 · Published 06/02/2023 · updated 17/06/2026

In breve

CVE-2022-4826 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda simple tooltips (simple tooltips project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.60%, superiore al 49.1% delle vulnerabilità.
Correzione: aggiornare a 2.1.4 o successiva.

Package	Affected versions	Patched versions
simple tooltips simple_tooltips_project	`< 2.1.4`	`2.1.4`

Description

The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

References

wpscan.com/vulnerability/59fa32d2-aa66-4980-9ee5-0a7513f3a2b0 · Exploit

Altre vulnerabilità di simple tooltips

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free