CVE-2022-0533

1 known exploit for CVE-2022-0533

The Ditty (formerly Ditty News Ticker) WordPress plugin before 3.0.15 is affected by a Reflected Cross-Site Scripting (XSS) vulnerability.

Affected products: The Ditty
Metaphorcreations Ditty: < 3.0.15

Fix: Available
CVSS 3.1: 6.1 MEDIUM
EPSS: 1.8% (77th percentile)
Weakness: CWE-79
NVD status: Modified
Published: 2022-03-07

CVE-2022-0533 at NVD

Authoritative description, scoring and affected products

Ditty (formerly Ditty News Ticker) < 3.0.15 - Reflected Cross-Site Scripting (XSS)

2022-02-09 Krzysztof ZającWPEXPLOIT