Vulnerability · Published Nov 18, 2022 · Assigned by Patchstack
CVE-2022-45082WordPress Accordions plugin <= 2.0.3 - Multiple Auth. Stored Cross-Site Scripting (XSS) vulnerabilities
Low 3.4
In plain English
A low-severity cross-site scripting in Accordions – Multiple Accordions or FAQs Builder (WordPress plugin) from Biplob Adhikari. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)3.4Low
Exploit odds (30 days)0.5%top 60.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Multiple Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerabilities in Accordions plugin <= 2.0.3 on WordPress via &addons-style-name and &accordions_or_faqs_license_key.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Biplob Adhikari | Accordions – Multiple Accordions or FAQs Builder (WordPress plugin) | <= 2.0.3 – through 2.0.3 |
Weakness: CWE-79 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:N/I:L/A:N