CVE-2022-4697: ProfilePress <= 4.5.0 - Authenticated (Administrator+) Stored Cross-Site Scripting
The ProfilePress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘wpusercoverdefaultimageurl’ parameter in versions up to, and including, 4.5.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. This only affects multi-site installations and installations where unfilteredhtml has been disabled.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2022-4697?
CVE-2022-4697 is a vulnerability in the ProfilePress plugin for WordPress that allows for Stored Cross-Site Scripting.
How does CVE-2022-4697 occur?
CVE-2022-4697 occurs due to insufficient input sanitization and output escaping in the 'wp_user_cover_default_image_url' parameter.
What is the severity of CVE-2022-4697?
The severity of CVE-2022-4697 is medium with a CVSS score of 4.8.
Which versions of the ProfilePress plugin for WordPress are affected by CVE-2022-4697?
Versions up to and including 4.5.0 of the ProfilePress plugin for WordPress are affected by CVE-2022-4697.
How can I fix CVE-2022-4697?
To fix CVE-2022-4697, it is recommended to update the ProfilePress plugin for WordPress to version 4.5.1 or higher.