CVE Database /
CVE-2022-4673
CVE · Medium
CVE-2022-4673 — Rate My Post – Star Rating Plugin by FeedbackWP [rate-my-post] < 3.3.9
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4673
|
Rate My Post – Star Rating Plugin by FeedbackWP [rate-my-post] < 3.3.9 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 3.3.9
|
3.3.9 |
2022-12-27 |
—
|
CVE-2022-4673
The Rate My Post – Star Rating Plugin version 3.3.9 and earlier contained a cross-site scripting flaw that allowed attackers to inject malicious scripts into websites. When site visitors accessed the compromised page, these injected scripts would execute, potentially delivering redirects, advertisements, or arbitrary HTML content. The vulnerability was discovered by Lana Codes and has been patched in version 3.3.9, making an update to this version or later necessary to eliminate the risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings