CVE-2022-47600: WordPress Mass Email To users Plugin <= 1.1.4 is vulnerable to Cross Site Scripting (XSS)
Published May 10, 2023
·Updated
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in I Thirteen Web Solution Mass Email To users plugin <= 1.1.4 versions.
Affected Software
1 affected component
I13websolution Mass Email To Users Wordpress<=1.1.4
Remediation
Information
Update to 1.1.5 or a higher version.
Event History
May 10, 2023
CVE Published
via MITRE·10:41 AM
Data Sourced
via MITRE·10:41 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-47600?
CVE-2022-47600 is an Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability found in the I Thirteen Web Solution Mass Email To users plugin.
2
How does CVE-2022-47600 affect the software?
CVE-2022-47600 affects I Thirteen Web Solution Mass Email To users plugin versions up to and including 1.1.4.
3
What is the severity of CVE-2022-47600?
CVE-2022-47600 has a severity rating of high with a CVSS score of 6.1.
4
How can I fix CVE-2022-47600?
To fix CVE-2022-47600, it is recommended to update I Thirteen Web Solution Mass Email To users plugin to a version higher than 1.1.4.
5
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-47600?
The CWE ID for CVE-2022-47600 is CWE-79, which refers to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting').