Vulnerability Details CVE-2022-47436
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 28.6%
CVSS Severity
CVSS v3 Score 5.9
References
- https://patchstack.com/database/vulnerability/yatra/wordpress-best-travel-booking-wordpress-plugin-tour-booking-system-trip-booking-wordpress-plugin-yatra-plugin-2-1-13-cross-site-scripting-xss?_s_id=cve
- https://patchstack.com/database/vulnerability/yatra/wordpress-best-travel-booking-wordpress-plugin-tour-booking-system-trip-booking-wordpress-plugin-yatra-plugin-2-1-13-cross-site-scripting-xss?_s_id=cve
Products affected by CVE-2022-47436
-
cpe:2.3:a:mantrabrain:yatra:*