← All advisories

Medium severity4.8NVD Advisory· Published Sep 9, 2022· Updated Jun 17, 2026

CVE-2022-36356

CVE-2022-36356

Description

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy / Thirty8 Digital Culture Object plugin <= 4.0.1 at WordPress.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

WordPress/Culture Objectllm-fuzzy
Range: <=4.0.1
Liam Gladdy / Thirty8 Digital/Culture Object (WordPress plugin)v5
Range: <= 4.0.1

Patches

Vulnerability mechanics

References

2

patchstack.com/database/vulnerability/culture-object/wordpress-culture-object-plugin-4-0-1-authenticated-stored-cross-site-scripting-xss-vulnerability/_s_id=cvenvdThird Party Advisory
wordpress.org/plugins/culture-object/nvdProductRelease Notes

News mentions

0

No linked articles in our index yet.