CVE-2022-47436

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14...

CVE-2022-47436

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in MantraBrain Yatra allows Stored XSS.This issue affects Yatra: from n/a through 2.1.14...

CVE-2022-47436

CVE-2022-47436 is a Stored XSS affecting the WordPress plugin Yatra (Best Travel Booking WordPress Plugin) by MantraBrain. Public details confirm the vulnerability exists in Yatra versions through 2.1.14 and that a fix is available in version 2.1.15. The root cause is improper neutralization of i...

WordPress Yatra Plugin <= 2.1.14 is vulnerable to Cross Site Scripting (XSS)

Software Yatra Type Plugin Vulnerable versions = 2.1.14 Fixed in 2.1.15 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47436 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 2a485b1401a3 Credits Team WeBoB Required privilege...