← voltar
CVE-2022-0252

Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool

EPSS 0.9%CWE-79
The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting
Produtos afetados
Unknown · GiveWP – Donation Plugin and Fundraising Platform

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://plugins.trac.wordpress.org/changeset/2659032https://wpscan.com/vulnerability/b0e551af-087b-43e7-bdb7-11d7f639028a