CVE-2022-4905

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2022-4905
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4905.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2022-4905
Aliases
Published
2023-02-13T21:00:05.905Z
Modified
2026-07-15T01:49:10.490132985Z
Severity
  • 3.5 (Low) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N CVSS Calculator
Summary
UDX Stateless Media Plugin class-settings.php setup_wizard_interface cross site scripting
Details

A vulnerability was found in UDX Stateless Media Plugin 3.1.1 on WordPress. It has been declared as problematic. This vulnerability affects the function setupwizardinterface of the file lib/classes/class-settings.php. The manipulation of the argument settings leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 3.2.0 is able to address this issue. The patch is identified as 6aee7ae0b0beeb2232ce6e1c82aa7e2041ae151a. It is recommended to upgrade the affected component. VDB-220750 is the identifier assigned to this vulnerability.

Database specific 
{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/4xxx/CVE-2022-4905.json",
    "cwe_ids": [
        "CWE-79"
    ],
    "cna_assigner": "VulDB"
}
References

Affected packages

Git / github.com/udx/wp-stateless

Affected ranges

Type
GIT
Repo
https://github.com/udx/wp-stateless
Events
Introduced
6bb4bdc691d3f8e21cc8f568a7539a2acd736a4f
Fixed
6aee7ae0b0beeb2232ce6e1c82aa7e2041ae151a
Fixed
86e9c61e2d29f60d16cc802b506ad89ffccf828d
Database specific 
{
    "extracted_events": [
        {
            "introduced": "3.1.1"
        },
        {
            "last_affected": "3.1.1"
        }
    ],
    "source": [
        "CPE_STRING",
        "REFERENCES"
    ],
    "cpe": "cpe:2.3:a:udx:stateless_media_plugin:3.1.1:*:*:*:*:wordpress:*:*"
}

Affected versions

3.*
3.1.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-4905.json"