CVE-2022-29476: WordPress Notification Bar for WordPress plugin <= 1.1.8 - Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability - Patchstack

Verified

Not fixed

6.1

CVSS 3.1 score Medium severity

Monitoring Coming soon

Software

Notification Bar for WordPress

Vulnerable versions

<= 1.1.8

PSID

5d0d17f12155

Classification

Cross Site Scripting (XSS)

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Required privilege

Can be exploited remotely without any authentication.

Publicly disclosed

2022-08-12

Details

Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by ptsfence (Patchstack Alliance) in WordPress Notification Bar for WordPress plugin (versions <= 1.1.8).

Solution

Deactivate and delete. This plugin has been closed as of August 12, 2022 and is not available for download. This closure is temporary, pending a full review.

References