CVE-2022-2599

🗓️ 29 Aug 2022 17:15:37Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 103 Views🌐 WEB

The Anti-Malware Security & Brute-Force Firewall WP plugin v4.21.83 & prior allows Reflected Cross-Site Scripting

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2022-2599	29 Aug 202218:15	–	attackerkb
Circl	CVE-2022-2599	29 Aug 202222:34	–	circl
CNNVD	WordPress plugin Anti-Malware Security and Brute-Force Firewall 跨站脚本漏洞	29 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2599 Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting	29 Aug 202217:15	–	cvelist
Nuclei	WordPress Anti-Malware Security and Brute-Force Firewall <4.21.83 - Cross-Site Scripting	1 Jul 202603:36	–	nuclei
NVD	CVE-2022-2599	29 Aug 202218:15	–	nvd
OpenVAS	WordPress Anti-Malware Security and Brute-Force Firewall Plugin < 4.21.83 XSS Vulnerability	17 Sep 202200:00	–	openvas
OSV	CVE-2022-2599	29 Aug 202218:15	–	osv
Patchstack	WordPress Anti-Malware Security and Brute-Force Firewall plugin <= 4.21.74 - Reflected Cross-Site Scripting (XSS) vulnerability	3 Aug 202200:00	–	patchstack
Prion	Cross site scripting	29 Aug 202218:15	–	prion

NVD

Vulners

Node

anti-malware_security_and_brute-force_firewall_project anti-malware_security_and_brute-force_firewallRange<4.21.83wordpress

[
  {
    "product": "Anti-Malware Security and Brute-Force Firewall",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.21.83",
        "status": "affected",
        "version": "4.21.83",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/276a7fc5-3d0d-446d-92cf-20060aecd0ef

Parameter	Position	Path	Description	CWE
GOTMLS_debug	query param	wp-admin/admin.php	Reflected XSS via unsanitised output of GOTMLS_debug parameter in admin settings page	CWE-79
eli	query param	wp-admin/admin.php	Reflected XSS via unsanitised output of eli parameter in admin settings page	CWE-79

17 Jun 2026 04:42Current

6Medium risk

Vulners AI Score6

CVSS 3.16.1

EPSS0.0102

CWE-79