Lucene search
Vinay Varma MudunuriWPVDB-ID:287A14DC-D1FC-481D-84AF-7EB172DC68C9HistoryNov 03, 2022 - 12:00 a.m.
Find and Replace All < 1.3 - Reflected Cross Site Scripting
2022-11-0300:00:00
Vinay Varma Mudunuri
wpscan.com
8
plugin vulnerability
reflected cross-site scripting
setting page.
0.001 Low
EPSS
Percentile
40.3%
The plugin does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.
PoC
| CPE | Name | Operator | Version |
|---|---|---|---|
| find-and-replace-all | lt | 1.3 |
Related
cvelist
cvelist
CVE-2022-2311 Find and Replace All < 1.3 - Reflected Cross Site Scripting
2022-11-28 13:47:13
cve
cve
CVE-2022-2311
2022-11-28 14:15:11
patchstack
patchstack
wpexploit
wpexploit
Find and Replace All < 1.3 - Reflected Cross Site Scripting
2022-11-03 00:00:00
nvd
nvd
CVE-2022-2311
2022-11-28 14:15:11
prion
prion
Cross site scripting
2022-11-28 14:15:00