CVE-2022-28290observed exploitationCWE-79

CVE-2022-28290: vulnerability in WordPress Country Selector Plugin

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

40Vexday Risk Score

Patch now. It exploitation observed by VulnCheck and has a working public exploit.

ssvc Actepss 1.4%
from disclosure to weapon
Published on NVDApr 25
VulnCheck+1482d
Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request