CVE-2022-2391
Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Aug 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description.
Affected products
Unknown · Inspiro PRO