Lucene search
+L

2 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•2 views

CVE-2022-2167: Improper Neutralization of Input During Web Page Generation

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.00583EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/31 12:00 a.m.•4 views

CVE-2022-2627: Improper Neutralization of Input During Web Page Generation

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting...

6.1CVSS6.4AI score0.01018EPSS
SaveExploits2References3
Rows per page
Query Builder