| |
Vulnerability CVE-2022-1906
Published: 2022-08-01
| Description: |
The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://wpscan.com/vulnerability/af4f459e-e60b-4384-aad9-0dc18aa3b338
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
