Security Advisory

CVE-2022-3137

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-10-10 00:00:00

Last updated 2024-08-03 01:00:10

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Taskbuilder WordPress plugin before 1.0.8 does not validate and sanitise task's attachments, which could allow any authenticated user (such as subscriber) creating a task to perform Stored Cross-Site Scripting by attaching a malicious SVG file

← Browse all CVEs View on cve.org ↗