CVE-2022-2937 - Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description

Back Back to CVE browser

MEDIUM

Image Hover Effects Ultimate <= 9.7.3 - Authenticated Stored Cross-Site Scripting via Title & Description

Published Sep 23, 2022

6.4

MEDIUM

CVSS 3.1

EPSS 0.62%

Description

The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Title & Description values that can be added to an Image Hover in versions up to, and including, 9.7.3 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. By default, the plugin only allows administrators access to edit Image Hovers, however, if a site admin makes the plugin's features available to lower privileged users through the 'Who Can Edit?' setting then this can be exploited by those users.

Affected products

Vendor Biplob018 Product Image Hover Effects Ultimate Default
n/a
- Version
  9.7.3
  Status
  affected
  Constraints
  <=9.7.3

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Biplob018

Image Hover Effects Ultimate

n/a

Version	Status	Constraints
9.7.3	affected	<=9.7.3

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2669411%40image-hover-effects-ultimate&new=2669411%40image-hover-effects-ultimate&sfp_email=&sfph_mail=
x_refsource_MISCPatchThird Party Advisory
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2937
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2669411%40image-hover-effects-ultimate&new=2669411%40image-hover-effects-ultimate&sfp_email=&sfph_mail=		x_refsource_MISCPatchThird Party Advisory
https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2937		x_refsource_MISCThird Party Advisory