CVE-2022-0448

MEDIUM

CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-0448 has a selected CVSS score of 4.8 (medium); EIP currently links 1 catalogued exploit.

Description

The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

CP Blocks

CVE List1.0.15 to < 1.0.15affected

Proofs of concept

1

Catalogued exploits

ExploitDBWordPress Plugin CP Blocks 1.0.14 - Stored Cross Site Scripting (XSS)ExploitDB exploitby Shweta MahajanNot analyzed1 file
ExploitDB
PoC details

References

2