CVE-2022-37339: WordPress Meet My Team plugin <= 2.0.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in Fullworks Meet My Team plugin <= 2.0.5 at WordPress.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-37339?
The severity of CVE-2022-37339 is medium with a CVSS score of 5.4.
How does CVE-2022-37339 affect the Fullworks Meet My Team plugin?
CVE-2022-37339 is an authenticated (contributor+) stored Cross-Site Scripting (XSS) vulnerability that affects Fullworks Meet My Team plugin versions up to and including 2.0.5 at WordPress.
How can I fix CVE-2022-37339 in the Fullworks Meet My Team plugin?
To fix CVE-2022-37339 in the Fullworks Meet My Team plugin, update to the latest version (2.0.6 or higher) released by the plugin developer.
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-37339?
The Common Weakness Enumeration (CWE) ID for CVE-2022-37339 is CWE-79.
Where can I find more information about CVE-2022-37339?
More information about CVE-2022-37339 can be found at the Patchstack vulnerability database (https://patchstack.com/database/vulnerability/meet-my-team/wordpress-meet-my-team-plugin-2-0-5-authenticated-stored-cross-site-scripting-xss-vulnerability) and the WordPress plugin page for Meet My Team (https://wordpress.org/plugins/meet-my-team/#developers).