Vulnerability · Published Jun 21, 2022 · Assigned by mitre
CVE-2022-30874
Medium 5.4
In plain English
A medium-severity security flaw in the nukeviet/nukeviet package (Packagist). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.8% (higher than 58% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)5.4Medium
Exploit odds (30 days)0.8%top 42.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Packagist | nukeviet/nukeviet | 4.5.02 | GHSA-pm37-5j5m-6cvw |
Affected products (as reported)
References
- https://github.com/nukeviet/nukeviet x_refsource_MISC
- https://blog.stmcyber.com/vulns/cve-2022-30874/ x_refsource_MISC
- https://whitehub.net/submissions/2968 x_refsource_MISC