CVE-2022-44742

概要

参考情報

• patchstack.com/database/vulnerability/community-events/wordpress-community-events-plugin-1-4-8-auth-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory

community events のその他の脆弱性

• CVE-2024-6270中 4.8The Community Events WordPress plugin before 1.5.1 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-6271中 5.4The Community Events WordPress plugin before 1.5 does not have CSRF check in place when deleting events, which could allow attackers to make…
• CVE-2021-24496中 6.1The Community Events WordPress plugin before 1.4.8 does not sanitise, validate or escape its importrowscount and successimportcount GET para…
• CVE-2015-3313緊急 9.8SQL injection vulnerability in WordPress Community Events plugin before 1.4.