CVE-2022-2219

HIGH Year: 2022
CVSS v3 Score
7.2
High
Weakness Type
CWE-79
View all →

Vulnerability Description

The Unyson WordPress plugin before 2.7.27 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Related Vulnerabilities

CVE-2016-15041

HIGH
CVSS:7.2(High)

The MainWP Dashboard – The Private WordPress Manager for Multiple Website Maintenance plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mwp_setup_purchase_username’ parameter ...

CWE-792016