CVE-2022-43497

MEDIUM6.1EPSS 1.7%

wordpress - security update

發布日:2022/12/5修改日:2026/5/27

描述

Cross-site scripting vulnerability in WordPress versions prior to 6.0.3 allows a remote unauthenticated attacker to inject an arbitrary script. The developer also provides new patched releases for all versions since 3.7.

受影響套件(4)

  • Bitnami/wordpressfrom 0, < 3.7.40, >= 3.8.0, < 3.8.40, >= 3.9.0, < 3.9.39, >= 4.0.0, < 4.0.37, >= 4.1.0, < 4.1.37, >= 4.2.0, < 4.2.34, >= 4.3.0, < 4.3.30, >= 4.4.0, < 4.4.29, >= 4.5.0, < 4.5.28, >= 4.6.0, < 4.6.25, >= 4.7.0, < 4.7.25, >= 4.8.0, < 4.8.21, >= 4.9.0, < 4.9.22, >= 5.0.0, < 5.0.18, >= 5.1.0, < 5.1.15, >= 5.2.0, < 5.2.17, >= 5.3.0, < 5.3.14, >= 5.4.0, < 5.4.12, >= 5.5.0, < 5.5.11, >= 5.6.0, < 5.6.10, >= 5.7.0, < 5.7.8, >= 5.8.0, < 5.8.6, >= 5.9.0, < 5.9.5, >= 6.0.0, < 6.0.3
  • Bitnami/wordpress-multisitefrom 0, < 3.7.40, >= 3.8.0, < 3.8.40, >= 3.9.0, < 3.9.39, >= 4.0.0, < 4.0.37, >= 4.1.0, < 4.1.37, >= 4.2.0, < 4.2.34, >= 4.3.0, < 4.3.30, >= 4.4.0, < 4.4.29, >= 4.5.0, < 4.5.28, >= 4.6.0, < 4.6.25, >= 4.7.0, < 4.7.25, >= 4.8.0, < 4.8.21, >= 4.9.0, < 4.9.22, >= 5.0.0, < 5.0.18, >= 5.1.0, < 5.1.15, >= 5.2.0, < 5.2.17, >= 5.3.0, < 5.3.14, >= 5.4.0, < 5.4.12, >= 5.5.0, < 5.5.11, >= 5.6.0, < 5.6.10, >= 5.7.0, < 5.7.8, >= 5.8.0, < 5.8.6, >= 5.9.0, < 5.9.5, >= 6.0.0, < 6.0.3
  • Debian/wordpressfrom 0, < 5.7.8+dfsg1-0+deb11u1
  • Debian/wordpressfrom 0, < 5.7.8+dfsg1-0+deb11u1

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1MEDIUM6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

參考連結(5)