CVE-2022-29432: WordPress wpDataTables plugin <= 2.1.27 - Multiple Authenticated Persistent Cross-Site Scripting (XSS) vulnerabilities
Multiple Authenticated (administrator or higher user role) Persistent Cross-Site Scripting (XSS) vulnerabilities in TMS-Plugins wpDataTables plugin <= 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29432?
CVE-2022-29432 is rated as a high severity vulnerability due to its potential for persistent cross-site scripting (XSS) attacks.
How do I fix CVE-2022-29432?
To fix CVE-2022-29432, update the wpDataTables plugin to the latest version beyond 2.1.27.
Who is affected by CVE-2022-29432?
Any WordPress site using the wpDataTables plugin version 2.1.27 or earlier with authenticated users having administrator or higher roles is affected.
What are the exploitation impacts of CVE-2022-29432?
Exploitation of CVE-2022-29432 may allow attackers to inject malicious scripts that can execute in the browser of users accessing the affected site.
What parameters are involved in CVE-2022-29432?
CVE-2022-29432 is related to vulnerable parameters including &data-link-text, &data-link-url, &data, &data-shortcode, and &data-star-num.