CVE-2022-0214 Vulnerability Details

  /     /     /  

CVE-2022-0214 Metadata Quick Info

CVE Published: 14/02/2022 | CVE Updated: 02/08/2024 | CVE Year: 2022
Source: WPScan | Vendor: Unknown | Product: Popup | Custom Popup Builder
Status : PUBLISHED

---

CVE-2022-0214 Description

The Custom Popup Builder WordPress plugin before 1.3.1 autoload data from its popup on every pages, as such data can be sent by unauthenticated user, and is not validated in length, this could cause a denial of service on the blog

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: CWE-1284 Improper Validation of Specified Quantity in Input
Source: Unknown

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).