CVE-2022-0953: vulnerability in Anti-Malware Security and Brute-Force Firewall
Anti-Malware Security and Brute-Force Firewall < 4.20.96 - Reflected Cross-Site Scripting
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 3.1%
exploitation probability
3.1%top 13% of all CVEs
observed exploitation
nono source reports it
The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.20.96 does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters
Affected products
Unknown · Anti-Malware Security and Brute-Force FirewallRelated CVEs — Anti-Malware Security and Brute-Force Firewall
In the same product, most dangerous first.