CVE-2022-2181

State: PUBLISHED · Published: 2022-08-01 · Updated: 2024-08-03 · Assigner: WPScan

Description

The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

CWE

CWE-79 — CWE-79 Cross-site Scripting (XSS)

Affected

Unknown / Advanced WordPress Reset — v=1.6 <1.6 [affected]

CVSS

(none)

References

https://wpscan.com/vulnerability/68ddf343-6e69-44a7-bd33-72004053d41e x_refsource_MISC

Source

cvelistV5-main/cves/2022/2xxx/CVE-2022-2181.json