Hoang Van Hiep

Hoang Van Hiep is a security researcher credited with 8 disclosed vulnerabilities in the WordSec WordPress vulnerability database, ranked #552 of 3,515 contributors. Their disclosures were published between 2022 and 2023. The most productive year was 2022, with 7 findings.

Their research concentrates on Cross-Site Scripting, which accounts for 8 of their findings (100%). The average CVSS score across these disclosures is 5.4, peaking at 5.5.

The most affected software includes 4ECPS Web Forms (1), AgentEasy Properties (1), AM-HiLi (1), across 8 distinct plugins, themes and core versions in total.

5 of the 8 disclosed issues have a vendor fix, while 3 remain unpatched.

20222023

Critical

High

Medium

Low

Global Rank

#552

of 3,515 researchers

Vulns

Critical0

High0

Medium8

Low0

Affected Assets

8plugins

Avg CVSS

5.4

Average score of vulnerabilities

Researcher Submissions

8 records


2023-06-27 00:00	Catalyst Connect Zoho CRM Client Portal <= 2.0.0 - Authenticated (Administrator+) Stored Cross-Site Scripting Catalyst Connect Zoho CRM Client Portal <= 2.0.0	`CVE-2022-44629`	4.4 Medium	Hoang Van Hiep	Yes
2022-11-17 00:00	Anthologize <= 0.8.0 - Authenticated (Admin+) Stored Cross-Site Scripting Anthologize <= 0.8.0	`CVE-2022-44591`	5.5 Medium	Hoang Van Hiep	Yes
2022-11-11 00:00	Chameleon <= 1.4.3 - Authenticated (Administrator+) Stored Cross-Site Scripting Chameleon <= 1.4.3	`CVE-2022-44736`	5.5 Medium	Hoang Van Hiep	Yes
2022-11-09 00:00	Car Rental by BestWebSoft <= 1.1.2 - Authenticated (Admin+) Stored Cross-Site Scripting Car Rental by BestWebSoft <= 1.1.2	`CVE-2022-44734`	5.5 Medium	Hoang Van Hiep	No
2022-11-07 00:00	Cyklodev WP Notify <= 1.2.1 - Authenticated (Admin+) Stored Cross-Site Scripting Cyklodev WP Notify <= 1.2.1	`CVE-2022-44625`	5.5 Medium	Hoang Van Hiep	Yes
2022-11-02 00:00	AgentEasy Properties <= 1.0.4 - Authenticated (Administrator+) Stored Cross-Site Scripting AgentEasy Properties <= 1.0.4	`CVE-2022-44576`	5.5 Medium	Hoang Van Hiep	No
2022-11-02 00:00	4ECPS Web Forms <= 0.2.17 - Authenticated (Administrator+) Stored Cross-Site Scripting 4ECPS Web Forms <= 0.2.17	`CVE-2022-44628`	5.5 Medium	Hoang Van Hiep	Yes
2022-11-02 00:00	AM-HiLi <= 1.0 - Authenticated (Administrator+) Stored Cross-Site Scripting AM-HiLi <= 1.0	`CVE-2022-44586`	5.5 Medium	Hoang Van Hiep	No

Showing 1–8 of 8 reports