CVE-2022-2391

CVE-2022-2391: Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting

Vendor Unknown

Product Inspiro PRO

Weakness CWE-79 · XSS

Published August 8, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description.

Key dates

02Disclosure timeline

August 8, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-2391 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/79.html

Related vulnerabilities

04Related CVE

CVE-2023-31177 Improper neutralizataion of input could lead to execution of arbitrary code CVE-2023-30753 WordPress IP Metaboxes Plugin <= 2.1.1 is vulnerable to Cross Site Scripting (XSS) CVE-2024-52887 Self-XSS CVE-2024-36156 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2024-3533 Campcodes Complete Online Student Management System academic_year_view.php cross site scripting