3 matches found
CVE-2022-0620
The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
6.1CVSS6.5AI score0.00788EPSS
SaveExploits2References1
CVE-2022-0620
The CVE-2022-0620 entry concerns the WordPress plugin Delete Old Orders (versions
6.1CVSS6.2AI score0.00788EPSS
SaveExploits2References1Affected Software1
CVE-2022-0620 Delete Old Orders <= 0.2 - Reflected Cross-Site Scripting
The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
6.4AI score0.00788EPSS
SaveExploits2References1
20