2 matches found
CVE-2022-0621
The dTabs WordPress plugin through 1.4 does not sanitize and escape the tab parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting...
6.1CVSS5.8AI score0.008EPSS
SaveExploits2References1
PT-2022-13305
Name of the Vulnerable Software and Affected Versions dTabs WordPress plugin versions prior to 1.4 Description The issue arises from the lack of proper sanitization and escaping of the tab parameter, which is then outputted back in an admin page. This leads to a Reflected Cross-Site Scripting...
6.1CVSS5.8AI score0.008EPSS
SaveExploits2References3
20