VDB
CVE-2022-3834
CVE-2022-3834
PUBLISHED
CVSS 4.800000190734863 MEDIUM
The Google Forms WordPress plugin through 0.95 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
EPSS 0.51% · 42.2th percentile
Risk Scores
CVSS 3.1
4.800000190734863
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
EPSS Score
0.51%
42.2th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| google_forms_project | google_forms | 0 |
| Unknown | Google Forms | 0 |
Timeline
- Nov 28, 2022 CVE Published
- Nov 29, 2022 EPSS Score
- Jan 11, 2023 EPSS Score
- Feb 22, 2023 EPSS Score
- Apr 6, 2023 EPSS Score
- May 19, 2023 EPSS Score
- Jul 1, 2023 EPSS Score
- Aug 12, 2023 EPSS Score
- Sep 24, 2023 EPSS Score
- Nov 6, 2023 EPSS Score
- Jan 30, 2024 EPSS Score
- Mar 13, 2024 EPSS Score