Lucene search

K
cvelistWPScanCVELIST:CVE-2022-1933
HistoryJul 17, 2022 - 10:35 a.m.

CVE-2022-1933 CDI < 5.1.9 - Reflected Cross-Site-Scripting

2022-07-1710:35:39
CWE-79
WPScan
raw.githubusercontent.com
1

0.001 Low

EPSS

Percentile

36.3%

The CDI WordPress plugin before 5.1.9 does not sanitise and escape a parameter before outputting it back in the response of an AJAX action (available to both unauthenticated and authenticated users), leading to a Reflected Cross-Site Scripting

0.001 Low

EPSS

Percentile

36.3%