CVE-2022-2844
MotoPress Timetable and Event Schedule Calendar cross site scripting
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability classified as problematic has been found in MotoPress Timetable and Event Schedule up to 1.4.06. This affects an unknown part of the file /wp/?cpmvc_id=1&cpmvc_do_action=mvparse&f=datafeed&calid=1&month_index=1&method=adddetails&id=2 of the component Calendar Handler. The manipulation of the argument Subject/Location/Description leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206487.
Se ha detectado una vulnerabilidad clasificada como problemática en MotoPress Timetable and Event Schedule versiones hasta 1.4.06. Esto afecta a una parte desconocida del archivo /wp/?cpmvc_id=1&cpmvc_do_action=mvparse&f=datafeed&calid=1&month_index=1&method=adddetails&id=2 del componente Calendar Handler. La manipulación del argumento Subject/Location/Description conlleva a un ataque de tipo cross site scripting. Es posible iniciar el ataque de forma remota. El identificador asociado a esta vulnerabilidad es VDB-206487.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-08-16 CVE Reserved
- 2022-08-16 CVE Published
- 2024-08-03 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CAPEC
References (0)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Motopress Search vendor "Motopress" | Timetable And Event Schedule Search vendor "Motopress" for product "Timetable And Event Schedule" | <= 1.4.06 Search vendor "Motopress" for product "Timetable And Event Schedule" and version " <= 1.4.06" | wordpress |
Affected
|