CVE-2022-4632
Last modified
CVE-2022-4632 is a medium-severity vulnerability rated 6.1/10 on the CVSS scale. A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in Auto Upload Images up to 3.3.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. The attack can be launched remotely. Upgrading to version 3.3.1 is able to address this issue. The name of the patch is 895770ee93887ec78429c78ffdfb865bee6f9436. It is recommended to upgrade the affected component. The identifier VDB-216481 was assigned to this vulnerability.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Auto Upload Images Project | Auto Upload Images | < 3.3.1 |
References
- https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436Patch, Third Party Advisory
- https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1Release Notes, Third Party Advisory
- https://vuldb.com/?id.216481Third Party Advisory
- https://github.com/airani/wp-auto-upload/commit/895770ee93887ec78429c78ffdfb865bee6f9436Patch, Third Party Advisory
- https://github.com/airani/wp-auto-upload/releases/tag/v3.3.1Release Notes, Third Party Advisory
- https://vuldb.com/?id.216481Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-4632?
How severe is CVE-2022-4632?
How do I fix CVE-2022-4632?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-46314The IPC module has defects introduced in the design process.…7.5
- CVE-2022-46315The ProfileSDK has defects introduced in the design process.…7.5
- CVE-2022-46316A thread security vulnerability exists in the authentication…9.8
- CVE-2022-46317The power consumption module has an out-of-bounds read vulne…7.5
- CVE-2022-46318The HAware module has a function logic error. Successful exp…5.3
- CVE-2022-46319Fingerprint calibration has a vulnerability of lacking bound…9.8
- CVE-2022-46320The kernel module has an out-of-bounds read vulnerability. S…9.8
- CVE-2022-46321The Wi-Fi module has a vulnerability in permission verificat…7.5
- CVE-2022-46322Some smartphones have the out-of-bounds write vulnerability.…7.5
- CVE-2022-46323Some smartphones have the out-of-bounds write vulnerability.…9.8
- CVE-2022-46324Some smartphones have the out-of-bounds write vulnerability.…9.8
- CVE-2022-46325Some smartphones have the out-of-bounds write vulnerability.…9.8
Are you affected by CVE-2022-4632?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
