1 matches found
CVE-2022-50958: Improper Neutralization of Input During Web Page Generation
WordPress Plugin Jetpack 9.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious scripts by manipulating the postid parameter. Attackers can craft URLs to the grunion-form-view.php endpoint with script payloads in the postid parameter ...
6.1CVSS6.1AI score0.00204EPSS
SaveExploits0References2
20