CVE-2022-1571

Cross-site scripting - Reflected in Create Subaccount in neorazorx/facturascripts

Cross-site scripting - Reflected in Create Subaccount in GitHub repository neorazorx/facturascripts prior to 2022.07. This vulnerability can be arbitrarily executed javascript code to steal user'cookie, perform HTTP request, get content of `same origin` page, etc ...

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Facturascripts

Products

Facturascripts

CVE-2022-1570

Files Download Delay < 1.0.7 - Subscriber+ Settings Reset

The Files Download Delay WordPress plugin before 1.0.7 does not have authorisation and CSRF checks when reseting its settings, which could allow any authenticated users, such as subscriber to perform such action.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Files Download Delay Project

Products

Files Download Delay

CVE-2022-1569

WordPress Forms by Pie Forms < 1.4.9.4 - Admin+ Stored Cross-Site Scripting

The Drag & Drop Builder, Human Face Detector, Pre-built Templates, Spam Protection, User Email Notifications & more! WordPress plugin before 1.4.9.4 does not sanitise and escape some of its form fields, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Pieforms

Products

Drag \& Drop Builder

CVE-2022-1568

Team Members < 5.1.1 - Admin+ Stored Cross-Site Scripting

The Team Members WordPress plugin before 5.1.1 does not escape some of its Team settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Wpdarko

Products

Team Members

CVE-2022-1566

Quotes llama < 1.0.0 - Admin+ Stored Cross-Site Scripting

The Quotes llama WordPress plugin before 1.0.0 does not sanitise and escape Quotes, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed. The attack could also be performed by tricking an admin to import a malicious CSV file

CVSS 3.1 · 4.8 Medium EPSS < 1% KEV · Not listed

Vendors

Quotes Llama Project

Products

Quotes Llama

CVE-2022-1564

Form Maker By 10Web < 1.14.12 - Admin+ Stored Cross-Site Scripting

The Form Maker by 10Web WordPress plugin before 1.14.12 does not sanitize and escape the Custom Text settings, which could allow high privilege user such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

CVSS 3.1 · 4.8 Medium EPSS 1.1% KEV · Not listed

Vendors

10web

Products

Form Maker

CVE-2022-1562

Enable SVG < 1.4.0 - Author+ Stored Cross Site Scripting via SVG

The Enable SVG WordPress plugin before 1.4.0 does not sanitise uploaded SVG files, which could allow users with a role as low as Author to upload a malicious SVG containing XSS payloads

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Room 34 Creative Services

Products

Enable Svg

CVE-2022-1561

Crafted backend URLs in Lura Project

Lura and KrakenD-CE versions older than v2.0.2 and KrakenD-EE versions older than v2.0.0 do not sanitize URL parameters correctly, allowing a malicious user to alter the backend URL defined for a pipe when remote users send crafty URL requests. The vulnerability does not affect KrakenD itself, but the consumed backend might be vulnerable.

CVSS 3.1 · 4 Medium EPSS < 1% KEV · Not listed

Vendors

Krakend Luraproject

Products

Krakend Lura

CVE-2022-1560

Amministrazione Aperta < 3.8 - Admin+ LFI

The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File Inclusion issue. The original advisory mentions that unauthenticated users can exploit this, however the affected file generates a fatal error when accessed directly and the affected code is not reached. The issue can be exploited via the dashboard when logged in as an admin, or by making a logged in admin open a malicious link

CVSS 3.1 · 6.5 Medium EPSS 2.3% KEV · Not listed

Vendors

Amministrazione Aperta Project

Products

Amministrazione Aperta

CVE-2022-1559

Clipr <= 1.2.3 - Admin+ Stored Cross-Site Scripting

The Clipr WordPress plugin through 1.2.3 does not sanitise and escape its API Key settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfiltered_html capability is disallowed

CVSS 3.1 · 4.8 Medium EPSS 1.0% KEV · Not listed

Vendors

Clipr

Products

Clipr

CVE-2022-1558

Curtain <= 1.0.2 - Admin+ Stored Cross-Site Scripting

The Curtain WordPress plugin through 1.0.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfiltered_html capability is disallowed

CVSS 3.1 · 4.8 Medium EPSS 1.0% KEV · Not listed

Vendors

Curtain Project

Products

Curtain

CVE-2022-1557

ULeak Security & Monitoring <= 1.2.3 - Subscriber+ Stored Cross-Site Scripting

The ULeak Security & Monitoring WordPress plugin through 1.2.3 does not have authorisation and CSRF checks when updating its settings, and is also lacking sanitisation as well as escaping in some of them, which could allow any authenticated users such as subscriber to perform Stored Cross-Site Scripting attacks against admins viewing the settings

CVSS 3.1 · 5.4 Medium EPSS 1.1% KEV · Not listed

Vendors

Uleak-security-dashboard Project

Products

Uleak-security-dashboard

CVE-2022-1556

StaffList < 3.1.5 - Admin+ SQLi

The StaffList WordPress plugin before 3.1.5 does not properly sanitise and escape a parameter before using it in a SQL statement when searching for Staff in the admin dashboard, leading to an SQL Injection

CVSS 3.1 · 9.8 Critical EPSS 20.1% KEV · Not listed

Vendors

Era404

Products

Stafflist

CVE-2022-1555

DOM XSS in microweber ver 1.2.15 in microweber/microweber

DOM XSS in microweber ver 1.2.15 in GitHub repository microweber/microweber prior to 1.2.16. inject arbitrary js code, deface website, steal cookie...

CVSS 3.1 · 6.1 Medium EPSS 1.3% KEV · Not listed

Vendors

Microweber

Products

Microweber

CVE-2022-1554

Path Traversal due to `send_file` call in clinical-genomics/scout

Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52.

CVSS 3.1 · 7.5 High EPSS 1.4% KEV · Not listed

Vendors

Clinical-genomics

Products

Scout

CVE-2022-1553

Leaking password protected articles content due to improper access control in publify/publify

Leaking password protected articles content due to improper access control in GitHub repository publify/publify prior to 9.2.8. Attackers can leverage this vulnerability to view the contents of any password-protected article present on the publify website, compromising confidentiality and integrity of users.

CVSS 3.1 · 4.9 Medium EPSS 1.2% KEV · Not listed

Vendors

Publify Project

Products

Publify

CVE-2022-1552

postgresql: Autovacuum, REINDEX, and others omit "security restricted operation" sandbox

A flaw was found in PostgreSQL. There is an issue with incomplete efforts to operate safely when a privileged user is maintaining another user's objects. The Autovacuum, REINDEX, CREATE INDEX, REFRESH MATERIALIZED VIEW, CLUSTER, and pg_amcheck commands activated relevant protections too late or not at all during the process. This flaw allows an attacker with permission to create non-temporary objects in at least one schema to execute arbitrary SQL functions under a superuser identity.

CVSS 3.1 · 8.8 High EPSS 17.0% KEV · Not listed

Vendors

Postgresql Redhat

Products

Postgresql Enterprise Linux Rhel E4s and 2 more

CVE-2022-1551

SP Project & Document Manager < 4.58 - Sensitive File Disclosure

The SP Project & Document Manager WordPress plugin before 4.58 uses an easily guessable path to store user files, bad actors could use that to access other users' sensitive files.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed

Vendors

Smartypantsplugins

Products

Sp Project \& Document Manager

CVE-2022-1549

WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting

The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Wp Athletics Project

Products

Wp Athletics

CVE-2022-1547

Check & Log email < 1.0.6 - Reflected Cross-Site Scripting

The Check & Log Email WordPress plugin before 1.0.6 does not sanitise and escape a parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Wpchill

Products

Check \& Log Email