CVE-2022-2599

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting...

CVE-2022-2599 Anti-Malware Security and Brute-Force Firewall < 4.21.83 - Reflected Cross-Site Scripting

The Anti-Malware Security and Brute-Force Firewall WordPress plugin before 4.21.83 does not sanitise and escape some parameters before outputting them back in an admin dashboard, leading to Reflected Cross-Site Scripting...

CVE-2022-2599

The CVE concerns the WordPress plugin “Anti-Malware Security and Brute-Force Firewall”, specifically versions prior to 4.21.83. Affected component is the plugin’s admin dashboard output, where some parameters are not sanitized/escaped before being echoed back, resulting in a Reflected Cross-Site ...