Vulnerabilities > CVE-2022-4475 - Unspecified vulnerability in Twinpictures Collapse-O-Matic

CVSS 5.4 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

LOW

Integrity impact

LOW

Availability impact

NONE

network

low complexity

twinpictures

NVD

Published: 2023-01-23

Updated: 2024-11-21

Summary

The Collapse-O-Matic WordPress plugin before 1.8.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin.

Vulnerable Configurations

Part	Description	Count
Application	Twinpictures Twinpictures Collapse O Matic 1.0 Twinpictures Collapse O Matic 1.1 Twinpictures Collapse O Matic 1.2 Twinpictures Collapse O Matic 1.3 Twinpictures Collapse O Matic 1.3.1 Twinpictures Collapse O Matic 1.3.2 Twinpictures Collapse O Matic 1.3.3 Twinpictures Collapse O Matic 1.3.4 Twinpictures Collapse O Matic 1.3.5 Twinpictures Collapse O Matic 1.3.6 Twinpictures Collapse O Matic 1.3.7 Twinpictures Collapse O Matic 1.3.8 Twinpictures Collapse O Matic 1.3.9 Twinpictures Collapse O Matic 1.3.10 Twinpictures Collapse O Matic 1.3.11 Twinpictures Collapse O Matic 1.3.12 Twinpictures Collapse O Matic 1.3.13 Twinpictures Collapse O Matic 1.3.14 Twinpictures Collapse O Matic 1.3.15 Twinpictures Collapse O Matic 1.3.16 Twinpictures Collapse O Matic 1.3.16.1 Twinpictures Collapse O Matic 1.3.17 Twinpictures Collapse O Matic 1.3.18 Twinpictures Collapse O Matic 1.4 Twinpictures Collapse O Matic 1.4.1 Twinpictures Collapse O Matic 1.4.2 Twinpictures Collapse O Matic 1.4.3 Twinpictures Collapse O Matic 1.4.4 Twinpictures Collapse O Matic 1.4.5 Twinpictures Collapse O Matic 1.4.6 Twinpictures Collapse O Matic 1.4.7 Twinpictures Collapse O Matic 1.4.8 Twinpictures Collapse O Matic 1.4.9 Twinpictures Collapse O Matic 1.4.10 Twinpictures Collapse O Matic 1.4.11 Twinpictures Collapse O Matic 1.5 Twinpictures Collapse O Matic 1.5.1 Twinpictures Collapse O Matic 1.5.2 Twinpictures Collapse O Matic 1.5.3 Twinpictures Collapse O Matic 1.5.4 Twinpictures Collapse O Matic 1.5.5 Twinpictures Collapse O Matic 1.5.6 Twinpictures Collapse O Matic 1.5.7 Twinpictures Collapse O Matic 1.5.8 Twinpictures Collapse O Matic 1.5.9 Twinpictures Collapse O Matic 1.5.10 Twinpictures Collapse O Matic 1.6 Twinpictures Collapse O Matic 1.6.1 Twinpictures Collapse O Matic 1.6.2 Twinpictures Collapse O Matic 1.6.3 Twinpictures Collapse O Matic 1.6.4 Twinpictures Collapse O Matic 1.6.5 Twinpictures Collapse O Matic 1.6.6 Twinpictures Collapse O Matic 1.6.7 Twinpictures Collapse O Matic 1.6.8 Twinpictures Collapse O Matic 1.6.9 Twinpictures Collapse O Matic 1.6.10 Twinpictures Collapse O Matic 1.6.11 Twinpictures Collapse O Matic 1.6.12 Twinpictures Collapse O Matic 1.6.13 Twinpictures Collapse O Matic 1.6.14 Twinpictures Collapse O Matic 1.6.15 Twinpictures Collapse O Matic 1.7.0 Twinpictures Collapse O Matic 1.7.1 Twinpictures Collapse O Matic 1.7.2 Twinpictures Collapse O Matic 1.7.3 Twinpictures Collapse O Matic 1.7.4 Twinpictures Collapse O Matic 1.7.5 Twinpictures Collapse O Matic 1.7.6 Twinpictures Collapse O Matic 1.7.7 Twinpictures Collapse O Matic 1.7.8 Twinpictures Collapse O Matic 1.7.9 Twinpictures Collapse O Matic 1.7.10 Twinpictures Collapse O Matic 1.7.11 Twinpictures Collapse O Matic 1.7.12 Twinpictures Collapse O Matic 1.7.13 Twinpictures Collapse O Matic 1.7.14 Twinpictures Collapse O Matic 1.8.0 Twinpictures Collapse O Matic 1.8.1 Twinpictures Collapse O Matic 1.8.2	80

Summary

Vulnerable Configurations

References