CVE-2022-29430

Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

Score

CVSS 3.1 6.1 Medium

Status

Modified - audit@patchstack.com

Published

2022-05-20

Last modified

2026-04-28

Weaknesses

CWE-352, CWE-79

Affected products

• Png To Jpg Wordpress Plugin (Kubiq)
• Png To Jpg (Png To Jpg Project)

References

• https://patchstack.com/database/vulnerability/png-to-jpg/wordpress-png-to-jpg-plugin-4-0-cross-site-request-forgery-csr…
• https://wordpress.org/plugins/png-to-jpg/#developers