| |
Vulnerability CVE-2022-2181
Published: 2022-08-01
| Description: |
The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://wpscan.com/vulnerability/68ddf343-6e69-44a7-bd33-72004053d41e
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
