Vulnerabilities > CVE-2022-36378 - Unspecified vulnerability in Floating DIV Project Floating DIV

CVSS 4.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

HIGH

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

floating-div-project

NVD

Published: 2022-07-29

Updated: 2024-11-21

Summary

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Floating Div plugin <= 3.0 at WordPress.

Vulnerable Configurations

Part	Description	Count
Application	Floating_Div_Project Floating DIV Project Floating DIV 1.0 Floating DIV Project Floating DIV 1.2 Floating DIV Project Floating DIV 1.3 Floating DIV Project Floating DIV 2.0 Floating DIV Project Floating DIV 3.0	5

References

https://patchstack.com/database/vulnerability/floating-div/wordpress-floating-div-plugin-3-0-authenticated-stored-cross-site-scripting-xss-vulnerability
https://wordpress.org/plugins/floating-div/#developers
https://patchstack.com/database/vulnerability/floating-div/wordpress-floating-div-plugin-3-0-authenticated-stored-cross-site-scripting-xss-vulnerability
https://wordpress.org/plugins/floating-div/#developers