๐Ÿ” CVE Alert

CVE-2022-4632

LOW 3.5

Auto Upload Images cross site scripting

CVSS Score
3.5
EPSS Score
0.0%
EPSS Percentile
0th

A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. The identifier VDB-216481 was assigned to this vulnerability.

CWE CWE-79
Vendor n/a
Product auto upload images
Published Dec 21, 2022
Last Updated Nov 19, 2024
Stay Ahead of the Next One

Get instant alerts for n/a auto upload images

Be the first to know when new low vulnerabilities affecting n/a auto upload images are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability

Affected Versions

n/a / Auto Upload Images
3.0 3.1 3.2 3.3

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
vuldb.com: https://vuldb.com/?id.216481 github.com: https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436 github.com: https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1