2 matches found
CVE-2022-2167: Improper Neutralization of Input During Web Page Generation
The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting...
6.1CVSS6.4AI score0.00583EPSS
SaveExploits2References2
CVE-2022-2627: Improper Neutralization of Input During Web Page Generation
The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting...
6.1CVSS6.4AI score0.01018EPSS
SaveExploits2References3
20