CVE-2022-3936: falha de média gravidade em Team Members
Team Members < 5.2.1 - Editor+ Stored XSS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 4.8epss 0.6%
The Team Members WordPress plugin before 5.2.1 does not sanitize and escapes some of its settings, which could allow high-privilege users such as editors to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in a multisite setup).
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Produtos afetados
Unknown · Team MembersCVEs relacionadas — Team Members
No mesmo produto, das mais perigosas para as menos.
CVE-2021-24128—Team Members < 5.0.4 - Authenticated Stored Cross-Site Scripting (XSS)EPSS 0.7%CVE-2022-1568—Team Members < 5.1.1 - Admin+ Stored Cross-Site ScriptingEPSS 0.6%CVE-2024-1331MEDIUMTeam Members < 5.3.2 - Author+ Stored XSSEPSS 0.4%CVE-2026-11871MEDIUMTeam Showcase Supreme < 9.3 - Unauthenticated Sensitive Data Disclosure via wpm_6310_team_member_detailsEPSS 0.2%