CVE-2022-38703: WordPress Button Plugin MaxButtons plugin <= 9.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Sep 23, 2022
·Updated
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Max Foundry Button Plugin MaxButtons plugin <= 9.2 at WordPress
Affected Software
1 affected component
Maxfoundry Maxbuttons Wordpress<=9.2
Remediation
Information
Update to 9.3 or higher version.
Event History
Sep 23, 2022
CVE Published
via MITRE·01:52 PM
Data Sourced
via MITRE·01:52 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-38703?
CVE-2022-38703 has a high severity rating due to its potential for exploitation through stored XSS attacks.
2
How do I fix CVE-2022-38703?
To fix CVE-2022-38703, update the MaxButtons plugin to version 9.3 or later.
3
What type of vulnerability is CVE-2022-38703?
CVE-2022-38703 is an authenticated stored cross-site scripting (XSS) vulnerability.
4
Who is affected by CVE-2022-38703?
CVE-2022-38703 affects users of the MaxButtons plugin version 9.2 or earlier on WordPress.
5
What is the impact of CVE-2022-38703?
The impact of CVE-2022-38703 includes the possibility for attackers to inject malicious scripts that could compromise user sessions or display unauthorized content.