CVE-2022-1763

MEDIUM

Static Page eXtended < 2.1 - Cross-Site Request Forgery and Stored Cross-Site Scripting

Title source: llm
STIX 2.1

Description

Due to missing checks the Static Page eXtended WordPress plugin through 2.1 is vulnerable to CSRF attacks which allows changing the plugin settings, including required user levels for specific features. This could also lead to Stored Cross-Site Scripting due to the lack of escaping in some of the settings

References (1)

Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://wpscan.com/vulnerability/bd3aff73-078a-4e5a-b9e3-1604851c6df8

Scores

CVSS v3 5.4
EPSS 0.0029
EPSS Percentile 20.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Details

CWE
CWE-352
Status published
Products (1)
static_page_extended_project/static_page_extended < 2.1
Published Jun 13, 2022
Tracked Since Feb 18, 2026