| |
Vulnerability CVE-2022-3209
Published: 2022-10-10
| Description: |
The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability. |
Type:
CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'))
References: |
https://wpscan.com/vulnerability/7a244fb1-fa0b-4294-9b51-588bf5d673a2
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
