CVE-2022-2599 Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting

2022-08-2917:15:37

CWE-79

WPScan

www.cve.org

cve-2022-2599

anti-malware security

brute-force firewall

wordpress plugin

cross-site scripting

0.001 Low

EPSS

Percentile

43.6%

JSON

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting

CNA Affected

[
  {
    "product": "Anti-Malware Security and Brute-Force Firewall",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.21.83",
        "status": "affected",
        "version": "4.21.83",
        "versionType": "custom"
      }
    ]
  }
]