CVE-2022-36347: WordPress Alpine PhotoTile for Pinterest plugin <= 1.3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability - Patchstack

Verified

Not fixed

4.8

CVSS 3.1 score Medium severity

Monitoring Coming soon

Software

Alpine PhotoTile for Pinterest

Vulnerable versions

<= 1.3.1

PSID

ac678906c44b

Classification

Cross Site Scripting (XSS)

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Required privilege

Requires high role user authentication like admin.

Publicly disclosed

2022-08-12

Details

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by ptsfence in WordPress Alpine PhotoTile for Pinterest plugin (versions <= 1.3.1).

Solution

Deactivate and delete. This plugin has been closed as of August 10, 2022 and is not available for download. This closure is temporary, pending a full review.

References