CVE-2022-1269

The Fast Flow WordPress plugin before 1.2.12 does not sanitise and escape the page parameter before outputting back in an attribute in an admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2022-1269 Fast Flow < 1.2.12 - Reflected Cross-Site Scripting

The Fast Flow WordPress plugin before 1.2.12 does not sanitise and escape the page parameter before outputting back in an attribute in an admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2022-1269

CVE-2022-1269 affects the Fast Flow WordPress plugin (versions prior to 1.2.12). The vulnerability is a reflected cross-site scripting (XSS) issue where the page parameter is not sanitized/escaped before being output in an admin-dashboard attribute. Exploitation requires no user privileges and ca...