Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-0901
HistoryApr 04, 2022 - 4:15 p.m.

Cross site scripting

2022-04-0416:15:00
PRIOn knowledge base
www.prio-n.com
4

0.001 Low

EPSS

Percentile

50.6%

The Ad Inserter Free and Pro WordPress plugins before 2.7.12 do not sanitise and escape the REQUEST_URI before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters

CPENameOperatorVersion
ad_inserterlt2.7.12
ad_inserterlt2.7.12

0.001 Low

EPSS

Percentile

50.6%