Lucene search
+L

14 matches found

VulnCheck KEV
VulnCheck KEV
•added 2026/05/16 12:00 a.m.•43 views

VulnCheck KEV: CVE-2022-28290

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6.1CVSS6.2AI score0.01399EPSS
SaveIn wildExploits2References65
RedhatCVE
RedhatCVE
•added 2025/05/23 1:06 a.m.•15 views

CVE-2022-28290

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6.1CVSS5.6AI score0.01399EPSS
SaveExploits2References1
CNVD
CNVD
•added 2022/04/26 12:00 a.m.•65 views

WordPress Country Selector Plugin跨站脚本漏洞

WordPress is a personal blogging system. WordPress Country Selector Plugin has a cross-site scripting vulnerability that can be exploited by attackers to execute XSS loads...

6.1CVSS2.9AI score0.01399EPSS
SaveExploits2References1
NVD
NVD
•added 2022/04/25 5:15 p.m.•36 views

CVE-2022-28290

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6.1CVSS0.01399EPSS
SaveExploits2References1
attackerkb
attackerkb
•added 2022/04/25 5:15 p.m.•42 views

CVE-2022-28290

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6.1CVSS5.9AI score0.01399EPSS
SaveExploits2References3
osv_cve
osv_cve
•added 2022/04/25 5:15 p.m.•23 views

CVE-2022-28290

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6.1CVSS6.4AI score0.01399EPSS
SaveExploits2References1
Prion
Prion
•added 2022/04/25 5:15 p.m.•23 views

Cross site scripting

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

4.3CVSS5.7AI score0.01399EPSS
SaveExploits2References1Affected Software1
Cvelist
Cvelist
•added 2022/04/25 4:31 p.m.•59 views

CVE-2022-28290

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6AI score0.01399EPSS
SaveExploits2References1
CVE
CVE
•added 2022/04/25 4:31 p.m.•136 views

CVE-2022-28290

CVE-2022-28290 affects the WordPress Country Selector plugin until version 1.6.5. The vulnerability is a reflected Cross-Site Scripting (XSS) issue where the plugin does not sanitize/escape the country and lang parameters before output, enabling arbitrary script execution in the user’s browser (c...

6.1CVSS5.8AI score0.01399EPSS
SaveIn wildExploits2References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/25 12:00 a.m.•8 views

CVE-2022-28290: Improper Neutralization of Input During Web Page Generation

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request...

6.1CVSS6.3AI score0.01399EPSS
SaveExploits2References3
Positive Technologies
Positive Technologies
•added 2022/04/25 12:00 a.m.•8 views

PT-2022-18935

Name of the Vulnerable Software and Affected Versions WordPress Country Selector Plugin version 1.6.5 Description A Reflective Cross-Site Scripting issue exists in the WordPress Country Selector Plugin. The XSS payload is executed when a user attempts to access the country selector page with a...

6.1CVSS0.01399EPSS
SaveExploits2References4
CNNVD
CNNVD
•added 2022/04/25 12:00 a.m.•23 views

WordPress plugin Country Selector 跨站脚本漏洞

WordPress is a personal blogging system. WordPress Country Selector Plugin has a cross-site scripting vulnerability that can be exploited by attackers to execute XSS loads...

6.1CVSS5.3AI score0.01399EPSS
SaveExploits2References3
Patchstack
Patchstack
•added 2022/04/20 12:00 a.m.•67 views

WordPress Country Selector premium plugin <= 1.6.5 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered in WordPress Country Selector premium plugin versions = 1.6.5. Solution Update the WordPress Country Selector premium plugin to the latest available version at least 1.6.6...

6.1CVSS2.3AI score0.01399EPSS
SaveExploits2References3Affected Software1
wpexploit
wpexploit
•added 2022/04/20 12:00 a.m.•127 views

Country Selector < 1.6.6 - Reflected Cross-Site Scripting

The plugin does not sanitise and escape the country and lang parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting " / " /...

6.1CVSS6.2AI score0.01399EPSS
SaveExploits2References1
Rows per page
Query Builder