{"vulnerability": "cve-2022-0953", "sightings": [{"uuid": "ddd97274-7990-4121-9cec-649a7b5138a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/cibsecurity/41390", "content": "\u203c CVE-2022-0953 \u203c\n\nThe Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-04-25T20:36:15.000000Z"}, {"uuid": "695920b6-a2ba-4693-90e7-c6079f686f6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/6276", "content": "#exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2022-06-26T15:16:02.000000Z"}, {"uuid": "1894cdc4-8ee3-4e26-bef9-bcd9b39c880c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/cissp/5956", "content": "Malware  analysis\nDeep Analysis of Snake Keylogger\nhttps://x-junior.github.io/malware%20analysis/2022/06/24/Snakekeylogger.html\n\nexploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-01T17:00:28.387691Z"}, {"uuid": "213d396e-e239-4a19-a746-91c4d6e30968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/cissp/5964", "content": "exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-01T17:00:28.162038Z"}, {"uuid": "2ff02bec-12a2-42bf-a1b7-6bd53ea25b30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/hacking_Attack/49606", "content": "Exploit Collector\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png \nWordPress Anti-Malware Security and Brute-Force Firewall plugin versions prior to 4.20.96 suffer from a cross site scripting vulnerability.\n\nMD5 | 2f8b972a36566b684356e0ea7f6fb4c0\n\nDownload\nTittle:\nWordPress Plugin Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting\n\nReferences:\nCVE-2022-0953\n\nAuthor:\nTaurus Omar \n\nDescription:\nThe plugin does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters.\n\nAffects Plugins:\nGotmls - Fixed in version 4.20.96\n\nProof of Concept:\nGET /wp-admin/admin.php?page=GOTMLS_View_Quarantine&a=\">\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:46.638521Z"}, {"uuid": "ff9e201e-e53c-4fde-8380-fa2349b3747b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/hacking_Attack/49606", "content": "Exploit Collector\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png \nWordPress Anti-Malware Security and Brute-Force Firewall plugin versions prior to 4.20.96 suffer from a cross site scripting vulnerability.\n\nMD5 | 2f8b972a36566b684356e0ea7f6fb4c0\n\nDownload\nTittle:\nWordPress Plugin Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting\n\nReferences:\nCVE-2022-0953\n\nAuthor:\nTaurus Omar \n\nDescription:\nThe plugin does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters.\n\nAffects Plugins:\nGotmls - Fixed in version 4.20.96\n\nProof of Concept:\nGET /wp-admin/admin.php?page=GOTMLS_View_Quarantine&a=\">\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:58.878477Z"}, {"uuid": "6c239e6e-6a25-4072-a63e-dd69d37fdba4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/cissp/5964", "content": "exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-02T01:04:10.616504Z"}, {"uuid": "3e201cbc-5685-47b0-94f2-6a4e55d54b23", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "seen", "source": "https://t.me/cissp/5956", "content": "Malware  analysis\nDeep Analysis of Snake Keylogger\nhttps://x-junior.github.io/malware%20analysis/2022/06/24/Snakekeylogger.html\n\nexploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-02T01:04:10.868823Z"}, {"uuid": "9b51327f-91c0-4cce-a799-8032ec28b532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/49606", "content": "Exploit Collector\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png \nWordPress Anti-Malware Security and Brute-Force Firewall plugin versions prior to 4.20.96 suffer from a cross site scripting vulnerability.\n\nMD5 | 2f8b972a36566b684356e0ea7f6fb4c0\n\nDownload\nTittle:\nWordPress Plugin Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting\n\nReferences:\nCVE-2022-0953\n\nAuthor:\nTaurus Omar \n\nDescription:\nThe plugin does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters.\n\nAffects Plugins:\nGotmls - Fixed in version 4.20.96\n\nProof of Concept:\nGET /wp-admin/admin.php?page=GOTMLS_View_Quarantine&a=\">\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T02:00:04.244573Z"}, {"uuid": "b1e28cec-c3b4-47e8-99fa-f3e097767a48", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/49606", "content": "Exploit Collector\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-mkcU-A73eZ4/WWlu7eKaHEI/AAAAAAAAIJY/m_4841aOwNcKGKR9ykgWprFWjwy04TKNACLcBGAs/s1600/h11.png \nWordPress Anti-Malware Security and Brute-Force Firewall plugin versions prior to 4.20.96 suffer from a cross site scripting vulnerability.\n\nMD5 | 2f8b972a36566b684356e0ea7f6fb4c0\n\nDownload\nTittle:\nWordPress Plugin Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting\n\nReferences:\nCVE-2022-0953\n\nAuthor:\nTaurus Omar \n\nDescription:\nThe plugin does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters.\n\nAffects Plugins:\nGotmls - Fixed in version 4.20.96\n\nProof of Concept:\nGET /wp-admin/admin.php?page=GOTMLS_View_Quarantine&a=\">\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-07T01:00:38.968116Z"}, {"uuid": "f480b618-64f3-475a-96e9-d7ab61d49983", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5956", "content": "Malware  analysis\nDeep Analysis of Snake Keylogger\nhttps://x-junior.github.io/malware%20analysis/2022/06/24/Snakekeylogger.html\n\nexploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-10T08:00:05.701979Z"}, {"uuid": "6141bfa1-e57f-4a1d-b0e7-1dcfe52629e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5964", "content": "exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-10T08:00:06.075753Z"}, {"uuid": "d8d5428e-3df3-4682-b38d-7053d36e393d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5964", "content": "exploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-11T00:00:47.658944Z"}, {"uuid": "d6a49945-d674-4c2b-af47-919fd3aff4a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-0953", "type": "published-proof-of-concept", "source": "https://t.me/cissp/5956", "content": "Malware  analysis\nDeep Analysis of Snake Keylogger\nhttps://x-junior.github.io/malware%20analysis/2022/06/24/Snakekeylogger.html\n\nexploit\n1. CVE-2022-0953:\nWordPress Anti-Malware Security And Brute-Force Firewall Cross Site Scripting\nhttps://packetstormsecurity.com/files/166680/WordPress-Anti-Malware-Security-And-Brute-Force-Firewall-Cross-Site-Scripting.html\n\n2. CVE-2022-34305:\nApache Tomcat Cross-Site Scripting Vulnerability\nhttps://github.com/zeroc00I/CVE-2022-34305", "creation_timestamp": "2026-09-11T00:00:47.361748Z"}]}