CVE-2022-38068: WordPress Export Post Info plugin <= 1.1.0 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Sep 9, 2022
·Updated
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Apasionados Export Post Info plugin <= 1.1.0 at WordPress.
Affected Software
1 affected component
Apasionados Export Post Info Wordpress<=1.1.0
Remediation
Information
Update to 1.2.0 or higher version.
Event History
Sep 8, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-38068?
CVE-2022-38068 is an Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in the Apasionados Export Post Info plugin <= 1.1.0 for WordPress.
2
What is the severity of CVE-2022-38068?
The severity of CVE-2022-38068 is medium, with a CVSS score of 4.8.
3
How does CVE-2022-38068 affect the Apasionados Export Post Info plugin?
CVE-2022-38068 affects the Apasionados Export Post Info plugin <= 1.1.0 for WordPress, allowing an authenticated admin user to store Cross-Site Scripting (XSS) payloads.
4
How can I fix CVE-2022-38068?
To fix CVE-2022-38068, you should update the Apasionados Export Post Info plugin to version 1.1.1 or higher.
5
What is CWE-79?
CWE-79 refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').