CVE-2022-34650: WordPress Team plugin <= 1.2.6 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities
Published Jul 22, 2022
·Updated
Multiple Authenticated (contributor or higher user role) Stored Cross-Site Scripting (XSS) vulnerabilities in wpWax Team plugin <= 1.2.6 at WordPress.
Affected Software
1 affected component
wpWax Team Wordpress<=1.2.6
Event History
Jul 22, 2022
CVE Published
via MITRE·04:51 PM
Data Sourced
via MITRE·04:51 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-34650.
2
What is the severity of CVE-2022-34650?
The severity of CVE-2022-34650 is medium with a CVSS score of 5.4.
3
What is the affected software?
The affected software is wpWax Team plugin <= 1.2.6 at WordPress.
4
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The Common Weakness Enumeration (CWE) ID for this vulnerability is CWE-79.
5
How can I fix the CVE-2022-34650 vulnerability?
To fix the CVE-2022-34650 vulnerability, you should update the wpWax Team plugin to version 1.2.7 or higher.