CVE-2022-45825

The CVE concerns the WordPress WPComplete plugin. Affected software: iThemes WPComplete plugin versions up to 2.9.2 (WordPress ecosystem context shows up to 2.9.4 in some sources). Vulnerability type: Unauth. Reflected Cross-Site Scripting (XSS) in the plugin’s handling of input exposed to site v...

CVE-2022-45825 WordPress WPComplete Plugin <= 2.9.4 is vulnerable to Cross Site Scripting (XSS)

Unauth. Reflected Cross-Site Scripting XSS vulnerability in iThemes WPComplete plugin = 2.9.2 versions...