Lucene search
PRIOn knowledge basePRION:CVE-2022-0189HistoryFeb 28, 2022 - 9:15 a.m.
Cross site scripting
2022-02-2809:15:00
PRIOn knowledge base
www.prio-n.com
4
0.001 Low
EPSS
Percentile
41.6%
The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response, leading to a Reflected Cross-Site Scripting
| CPE | Name | Operator | Version |
|---|---|---|---|
| wp_rss_aggregator | lt | 4.20 |
Related
wpvulndb
wpvulndb
WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)
2022-01-26 00:00:00
patchstack
patchstack
cnvd
cnvd
WordPress WP RSS Aggregator plugin cross-site scripting vulnerability
2022-03-02 00:00:00
nuclei
nuclei
WordPress RSS Aggregator < 4.20 - Authenticated Cross-Site Scripting
2022-03-27 14:25:03
nvd
nvd
CVE-2022-0189
2022-02-28 09:15:08
cve
cve
CVE-2022-0189
2022-02-28 09:15:08
cvelist
cvelist
wpexploit
wpexploit
WP RSS Aggregator < 4.20 - Reflected Cross-Site Scripting (XSS)
2022-01-26 00:00:00