CVE-2022-28290

2022-04-2516:31:01

CWE-79

CSW

www.cve.org

wordpress

country selector

xss

vulnerability

http request

EPSS

0.001

Percentile

37.9%

JSON

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request

CNA Affected

[
  {
    "product": "WordPress Country Selector Plugin",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Version 1.6.5"
      }
    ]
  }
]