CVE-2022-1220

CVE-2022-1220 affects the FoxyShop WordPress plugin prior to 4.8.2. The issue is a failure to sanitize and escape a parameter before it is echoed back on an admin page, resulting in a Reflected Cross-Site Scripting vulnerability. The exposure is in the admin context, with exploitation potentially...