Lucene search
WPScanCVELIST:CVE-2022-1436HistoryMay 16, 2022 - 2:31 p.m.
CVE-2022-1436 WPCargo Track & Trace < 6.9.5 - Reflected Cross Site Scripting
2022-05-1614:31:05
CWE-79
WPScan
www.cve.org
0.001 Low
EPSS
Percentile
40.2%
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.
CNA Affected
[
{
"product": "WPCargo Track & Trace",
"vendor": "Unknown",
"versions": [
{
"lessThan": "6.9.5",
"status": "affected",
"version": "6.9.5",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-1436
2022-05-16 15:15:09
patchstack
patchstack
prion
prion
Cross site scripting
2022-05-16 15:15:00
cve
cve
CVE-2022-1436
2022-05-16 15:15:09
cnvd
cnvd
WordPress WPCargo Track
2022-05-18 00:00:00