CVE-2022-41990

Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza 3D Tag Cloud allows Stored XSS.This issue affects 3D Tag Cloud: from n/a through 3.8.

Score

CVSS 3.1 8.8 High

Status

Modified - audit@patchstack.com

Published

2024-01-17

Last modified

2026-04-28

Weaknesses

CWE-352

Affected products

• Cardoza-3d-tag-cloud (Cardozatechnologies)
• 3d Tag Cloud (Vinoj Cardoza)

References

• https://patchstack.com/database/vulnerability/cardoza-3d-tag-cloud/wordpress-3d-tag-cloud-plugin-3-8-stored-cross-site-…