CVE-2022-33994
The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "Insert from URL" feature.
Does this matter?
Lower severity and a low EPSS score (0.68%). Track it; it rarely justifies an emergency change on its own.
Description
The Gutenberg plugin through 13.7.3 for WordPress allows stored XSS by the Contributor role via an SVG document to the "Insert from URL" feature. NOTE: the XSS payload does not execute in the context of the WordPress instance's domain; however, analogous attempts by low-privileged users to reference SVG documents are blocked by some similar products, and this behavioral difference might have security relevance to some WordPress site administrators.
- CVSS 3.1
- 3.0 LOWCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:N/I:L/A:N
- EPSS
- 0.68% probability · 51th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79
- Affected
- gutenberg project/gutenberg
- Source
- cve@mitre.org
References
- https://blog.jitendrapatro.me/cve-2022-33994-stored-xss-in-wordpress/Third Party Advisory
- https://patchstack.com/articles/patchstack-weekly-svg-xss-reported-in-gutenberg/Exploit, Third Party Advisory
- https://blog.jitendrapatro.me/cve-2022-33994-stored-xss-in-wordpress/Third Party Advisory
- https://patchstack.com/articles/patchstack-weekly-svg-xss-reported-in-gutenberg/Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.