CVE-2022-4295

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin...

CVE-2022-4295

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin...

CVE-2022-4295 Show All Comments < 7.0.1 - Reflected XSS

The Show All Comments WordPress plugin before 7.0.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against a logged in high privilege users such as admin...

CVE-2022-4295

The CVE-2022-4295 affects the Show All Comments WordPress plugin (pre-7.0.1). The issue is a Reflected XSS caused by not sanitising/escaping a parameter before it is echoed in the page, potentially affecting logged-in high-privilege users such as admins. The vulnerability is exploitable via craft...