CVE-2022-2426 | BDVDB-2026-181771 Detail

Thinkific Uploader

Description#

The Thinkific Uploader WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks against other administrators.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/00e36ad9-b55b-4d17-96fb-e415eec47422

Exploit#

No public exploit known

History#

Version 12022-08-08Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.