Vulnerabilites related to Unknown - Superio
cve-2022-4114
Vulnerability from cvelistv5
Published
2023-01-02 21:49
Modified
2024-08-03 01:27
Severity ?
EPSS score ?
Summary
The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks.
References
▼ | URL | Tags |
---|---|---|
https://wpscan.com/vulnerability/7569f4ac-05c9-43c9-95e0-5cc360524bbd | exploit, vdb-entry, technical-description | |
https://themeforest.net/item/superio-job-board-wordpress-theme/32180231 |
{ "containers": { "adp": [ { "providerMetadata": { "dateUpdated": "2024-08-03T01:27:54.443Z", "orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE" }, "references": [ { "tags": [ "exploit", "vdb-entry", "technical-description", "x_transferred" ], "url": "https://wpscan.com/vulnerability/7569f4ac-05c9-43c9-95e0-5cc360524bbd" }, { "tags": [ "x_transferred" ], "url": "https://themeforest.net/item/superio-job-board-wordpress-theme/32180231" } ], "title": "CVE Program Container" } ], "cna": { "affected": [ { "defaultStatus": "unaffected", "product": "Superio", "vendor": "Unknown", "versions": [ { "lessThan": "1.2.33", "status": "affected", "version": "0", "versionType": "custom" } ] } ], "credits": [ { "lang": "en", "type": "finder", "value": "Veshraj Ghimire" }, { "lang": "en", "type": "coordinator", "value": "WPScan" } ], "descriptions": [ { "lang": "en", "value": "The Superio WordPress theme does not sanitise and escape some parameters, which could allow users with a role as low as a subscriber to perform Cross-Site Scripting attacks." } ], "problemTypes": [ { "descriptions": [ { "description": "CWE-79 Cross-Site Scripting (XSS)", "lang": "en", "type": "CWE" } ] } ], "providerMetadata": { "dateUpdated": "2023-01-10T09:08:46.097Z", "orgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "shortName": "WPScan" }, "references": [ { "tags": [ "exploit", "vdb-entry", "technical-description" ], "url": "https://wpscan.com/vulnerability/7569f4ac-05c9-43c9-95e0-5cc360524bbd" }, { "url": "https://themeforest.net/item/superio-job-board-wordpress-theme/32180231" } ], "source": { "discovery": "EXTERNAL" }, "title": "Superio - Job Board \u003c 1.2.33 - Subscriber+ Stored Cross-Site Scripting", "x_generator": { "engine": "WPScan CVE Generator" } } }, "cveMetadata": { "assignerOrgId": "1bfdd5d7-9bf6-4a53-96ea-42e2716d7a81", "assignerShortName": "WPScan", "cveId": "CVE-2022-4114", "datePublished": "2023-01-02T21:49:27.563Z", "dateReserved": "2022-11-22T07:01:33.817Z", "dateUpdated": "2024-08-03T01:27:54.443Z", "state": "PUBLISHED" }, "dataType": "CVE_RECORD", "dataVersion": "5.1" }