3 matches found
CVE-2022-1338
The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS6AI score0.00588EPSS
SaveExploits2References1
CVE-2022-1338
The CVE-2022-1338 entry affects the WordPress plugin Easily Generate Rest API Url (versions
4.8CVSS4.8AI score0.00588EPSS
SaveExploits2References1Affected Software1
CVE-2022-1338 Easily Generate Rest API Url <= 1.0.0 - Admin+ Stored Cross-Site Scripting
The Easily Generate Rest API Url WordPress plugin through 1.0.0 does not escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
5AI score0.00588EPSS
SaveExploits2References1
20