CVE-2022-0446: Simple Banner < 2.12.0 - Admin+ Stored Cross Site Scripting
Published Aug 22, 2022
·Updated
The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed.
Affected Software
1 affected component
Simple Banner Project Simple Banner Wordpress<2.12.0
Event History
Aug 22, 2022
CVE Published
via MITRE·02:57 PM
Data Sourced
via MITRE·02:57 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0446?
CVE-2022-0446 is categorized as a high severity vulnerability due to its potential for Cross-Site Scripting attacks.
2
How do I fix CVE-2022-0446?
To fix CVE-2022-0446, update the Simple Banner WordPress plugin to version 2.12.0 or later.
3
Who is affected by CVE-2022-0446?
CVE-2022-0446 affects users of the Simple Banner WordPress plugin versions prior to 2.12.0.
4
What type of vulnerability is CVE-2022-0446?
CVE-2022-0446 is a Cross-Site Scripting (XSS) vulnerability caused by improper sanitization of input.
5
Can low privilege users exploit CVE-2022-0446?
No, CVE-2022-0446 requires high privilege users to exploit the vulnerability due to the permission restrictions.