CVE-2022-2181
01.08.2022, 13:15
The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
Vendor | Product | Version |
---|---|---|
sigmaplugin | advanced_wordpress_reset | 𝑥 < 1.6 |
𝑥
= Vulnerable software versions