by vicarius
Log in
Join community

CVE-2022-29430

20 May 2022
Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

VTranslations (0)

Remedies (0)

Apps (0)

No Apps

Operating Systems (0)

No Operating Systems

Comments (0)

CVE-2022-29430

6.1 High Severity
Share
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Tags (5)
#known_vulnerability#easy_to_exploit#user_interaction_required_for_exploiting#new_vulnerability_published#CVE-2022-29430
Vulnerability Categories (2)
Cross-Site Request Forgery (CSRF), Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Advisory Links (2)
wordpress.org/plu...patchstack.com/da...

Related