5 matches found
CVE-2022-0252
The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting...
CVE-2022-0252
The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting...
Cross site scripting
The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting...
PT-2022-13070
Name of the Vulnerable Software and Affected Versions GiveWP WordPress plugin versions prior to 2.17.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the json parameter is not properly escaped before being outputted back in an attribute within the Impor...
CVE-2022-0252: Improper Neutralization of Input During Web Page Generation
The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting...