Vulnerabilities > CVE-2022-3209 - Unspecified vulnerability in Pencidesign Soledad

CVSS 6.1 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

pencidesign

NVD

Published: 2022-10-10

Updated: 2024-11-21

Summary

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

Vulnerable Configurations

Part	Description	Count
Application	Pencidesign Pencidesign Soledad 8.0.0 Pencidesign Soledad 8.0.1 Pencidesign Soledad 8.0.2 Pencidesign Soledad 8.0.4 Pencidesign Soledad 8.0.5 Pencidesign Soledad 8.0.6 Pencidesign Soledad 8.0.7 Pencidesign Soledad 8.0.8 Pencidesign Soledad 8.0.9 Pencidesign Soledad 8.1.0 Pencidesign Soledad 8.1.1 Pencidesign Soledad 8.1.2 Pencidesign Soledad 8.1.3 Pencidesign Soledad 8.1.4 Pencidesign Soledad 8.1.5 Pencidesign Soledad 8.1.6 Pencidesign Soledad 8.1.7 Pencidesign Soledad 8.1.8 Pencidesign Soledad 8.1.9 Pencidesign Soledad 8.2.0 Pencidesign Soledad 8.2.1 Pencidesign Soledad 8.2.2 Pencidesign Soledad 8.2.3 Pencidesign Soledad 8.2.4	24

Summary

Vulnerable Configurations

References