CVE-2022-0471

The CVE-2022-0471 entry applies to the WordPress plugin “Favicon by RealFaviconGenerator” (pre-1.3.23). The vulnerability arises from improper sanitisation/escaping of the json_result_url parameter, leading to a Reflected Cross-Site Scripting (XSS) in the Favicon admin dashboard. Affected version...

CVE-2022-0471 Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting

The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the jsonresulturl parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue...