3 matches found
CVE-2022-0643
The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
6.1CVSS6.5AI score0.00788EPSS
SaveExploits2References1
CVE-2022-0643
The Bank Mellat WordPress plugin (versions
6.1CVSS6.1AI score0.00788EPSS
SaveExploits2References1Affected Software1
CVE-2022-0643 Bank Mellat <= 1.3.7 - Reflected Cross-Site Scripting
The Bank Mellat WordPress plugin through 1.3.7 does not sanitize and escape the orderId parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
6.4AI score0.00788EPSS
SaveExploits2References1
20