CVE-2022-36341: 
WordPress vulnerability analysis and mitigation

The vulnerability (CVE-2022-36341) was identified in Akash soni's AS – Create Pinterest Pinboard Pages WordPress plugin version 1.0 and below. Discovered on August 10, 2022, this security flaw allows authenticated users with subscriber or higher privileges to perform Stored Cross-Site Scripting (XSS) attacks through plugin settings modifications (Patchstack).

The vulnerability has been assigned a CVSS v3.1 base score of 5.4 (Medium severity). The attack vector is network-based, with low attack complexity, requiring low privileges and user interaction. The scope is changed, with low impact on both confidentiality and integrity, but no impact on availability (AttackerKB).

When exploited, this vulnerability could allow malicious actors to inject malicious scripts, including redirects, advertisements, and other HTML payloads into the website. These injected scripts would be executed when guests visit the affected site (Patchstack).

The plugin has been closed as of August 22, 2022, due to this security issue and is no longer available for download. Patchstack has issued a virtual patch to mitigate this issue by blocking attacks until an official fix becomes available (WordPress, Patchstack).