CVE-2022-2050: WP Paginate < 2.1.9 - Admin+ Stored Cross-Site Scripting
Published Jul 11, 2022
·Updated
The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfilteredhtml is disallowed
Affected Software
1 affected component
Maxfoundry Wp-paginate Wordpress<2.1.9
Event History
Jul 11, 2022
CVE Published
via MITRE·12:57 PM
Data Sourced
via MITRE·12:57 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2050?
CVE-2022-2050 is classified as a high severity vulnerability due to the potential for Stored Cross-Site Scripting attacks.
2
How do I fix CVE-2022-2050?
To fix CVE-2022-2050, update the WP-Paginate plugin to version 2.1.9 or later.
3
Who is affected by CVE-2022-2050?
CVE-2022-2050 affects users of the WP-Paginate WordPress plugin prior to version 2.1.9.
4
What type of attack does CVE-2022-2050 allow?
CVE-2022-2050 allows high privilege users to perform Stored Cross-Site Scripting (XSS) attacks.
5
Is unfiltered_html a factor in CVE-2022-2050?
Yes, CVE-2022-2050 can be exploited when the unfiltered_html capability is disallowed for high privilege users.