Vulnerabilities > CVE-2022-4391 - Unspecified vulnerability in Vision Interactive Project Vision Interactive

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

vision-interactive-project

NVD

Published: 2023-01-09

Updated: 2023-11-07

Summary

The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Vulnerable Configurations

Part	Description	Count
Application	Vision_Interactive_Project Vision Interactive Project Vision Interactive - Vision Interactive Project Vision Interactive 1.0.0 Vision Interactive Project Vision Interactive 1.0.1 Vision Interactive Project Vision Interactive 1.0.2 Vision Interactive Project Vision Interactive 1.1.0 Vision Interactive Project Vision Interactive 1.1.1 Vision Interactive Project Vision Interactive 1.2.0 Vision Interactive Project Vision Interactive 1.2.1 Vision Interactive Project Vision Interactive 1.2.2 Vision Interactive Project Vision Interactive 1.2.3 Vision Interactive Project Vision Interactive 1.3.0 Vision Interactive Project Vision Interactive 1.4.0 Vision Interactive Project Vision Interactive 1.4.1 Vision Interactive Project Vision Interactive 1.4.2 Vision Interactive Project Vision Interactive 1.4.3 Vision Interactive Project Vision Interactive 1.4.4 Vision Interactive Project Vision Interactive 1.5.0 Vision Interactive Project Vision Interactive 1.5.1 Vision Interactive Project Vision Interactive 1.5.2 Vision Interactive Project Vision Interactive 1.5.3	20

References

https://wpscan.com/vulnerability/c0c37787-3c4c-42d5-bb75-5d4ed3e7aa2b