CVE-2022-3506: Cross-site Scripting (XSS) - Stored in barrykooij/related-posts-for-wp

Q: What is the vulnerability ID for this cross-site scripting vulnerability?

The vulnerability ID for this cross-site scripting vulnerability is CVE-2022-3506.

Q: What is the severity rating of CVE-2022-3506?

CVE-2022-3506 has a severity rating of 5.4, which is considered medium.

Q: Which software is affected by CVE-2022-3506?

The Never5 Related Posts plugin for WordPress, versions up to and excluding 2.1.3, is affected by CVE-2022-3506.

Q: How can I fix CVE-2022-3506?

To fix CVE-2022-3506, you should update your Never5 Related Posts plugin to version 2.1.3 or higher.

Q: Where can I find more information about CVE-2022-3506?

You can find more information about CVE-2022-3506 at the following references: [GitHub Commit](https://github.com/barrykooij/related-posts-for-wp/commit/37733398dd88863fc0bdb3d6d378598429fd0b81) and [Huntr.dev Bounty](https://huntr.dev/bounties/08251542-88f6-4264-9074-a89984034828).

Published Oct 14, 2022

Updated

Cross-site Scripting (XSS) - Stored in GitHub repository barrykooij/related-posts-for-wp prior to 2.1.3.

Affected Software

1 affected component

Never5 Related Posts Wordpress<2.1.3

Remediation

Patch Available

https://github.com/barrykooij/related-posts-for-wp/commit/37733398dd88863fc0bdb3d6d378598429fd0b81

Event History

Oct 14, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this cross-site scripting vulnerability?

The vulnerability ID for this cross-site scripting vulnerability is CVE-2022-3506.

What is the severity rating of CVE-2022-3506?

CVE-2022-3506 has a severity rating of 5.4, which is considered medium.

Which software is affected by CVE-2022-3506?