VULNERABILITY INTELLIGENCE

CVE-2022-3194

CVSS score5.4 MEDIUM
EPSS probability0.49%
CISA KEVNot currently listed
Published2024-01-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Description

The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.

Weakness classification

  • nvd@nist.gov: CWE-79

Primary references