Vulnerability · Published May 16, 2022 · Assigned by WPScan
CVE-2022-1051WPQA < 5.2 - Subscriber+ Stored Cross-Site Scripting via Profile fields
Medium 5.4
In plain English
A medium-severity cross-site scripting in WPQA Builder Plugin from Unknown. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 70% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)1.3%top 29.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
The WPQA Builder Plugin WordPress plugin before 5.2, used as a companion plugin for the Discy and Himer , does not sanitise and escape the city, phone or profile credentials fields when outputting it in the profile page, allowing any authenticated user to perform Cross-Site Scripting attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Unknown | WPQA Builder Plugin | 5.2 – before 5.2 |
Weakness: CWE-79