CVE-2022-1152

{"id": "CVE-2022-1152", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 2.7, "exploitabilityScore": 2.3}]}, "published": "2022-04-25T16:16:08.443", "references": [{"url": "https://wpscan.com/vulnerability/1c55fda9-e938-4267-be77-a6d73ee46af3", "tags": ["Exploit", "Third Party Advisory"], "source": "contact@wpscan.com"}, {"url": "https://wpscan.com/vulnerability/1c55fda9-e938-4267-be77-a6d73ee46af3", "tags": ["Exploit", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "contact@wpscan.com", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "The Menubar WordPress plugin before 5.8 does not sanitise and escape the command parameter before outputting it back in the response via the menubar AJAX action (available to any authenticated users), leading to a Reflected Cross-Site Scripting"}, {"lang": "es", "value": "El plugin Menubar de WordPress versiones anteriores a 5.8, no sanea y escapa el par\u00e1metro command antes de devolverlo en la respuesta por medio de la acci\u00f3n AJAX de la menubar (disponible para cualquier usuario autenticado), conllevando a un ataque de tipo Cross-Site Scripting Reflejado"}], "lastModified": "2024-11-21T06:40:08.447", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:menubar:menubar:*:*:*:*:*:wordpress:*:*", "vulnerable": true, "matchCriteriaId": "CBDF37B8-AD55-47CE-876C-FF7D8EEE180E", "versionEndExcluding": "5.8"}], "operator": "OR"}]}], "sourceIdentifier": "contact@wpscan.com"}