CVE-2022-1192
23.05.2022, 08:16
The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Vendor | Product | Version |
---|---|---|
turn_off_all_comments_project | turn_off_all_comments | 𝑥 ≤ 1.0 |
𝑥
= Vulnerable software versions