CVE-2022-37403 - WordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

MEDIUM

WordPress Add User Role plugin <= 0.0.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 9, 2022

4.8

MEDIUM

CVSS 3.1

EPSS 0.55%

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nikhil Vaghela's Add User Role plugin <= 0.0.1 at WordPress.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
<= 0.0.1	affected	<=0.0.1

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://patchstack.com/database/vulnerability/add-user-role/wordpress-add-user-role-plugin-0-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cve		x_refsource_CONFIRMThird Party Advisory
https://wordpress.org/plugins/add-user-role/		x_refsource_CONFIRMProductRelease Notes