Lucene search
WpvulndbWPVDB-ID:6C5A4BCE-6266-4CFC-BC87-4FC3E36CB479HistoryApr 20, 2022 - 12:00 a.m.
Country Selector < 1.6.6 - Reflected Cross-Site Scripting
2022-04-2000:00:00
wpscan.com
11
plugin
cross-site scripting
response sanitisation
EPSS
0.001
Percentile
37.9%
The plugin does not sanitise and escape the country and lang parameters before outputting them back in the response, leading to a Reflected Cross-Site Scripting
PoC
Related
prion
prion
Cross site scripting
2022-04-25 17:15:00
patchstack
patchstack
cvelist
cvelist
CVE-2022-28290
2022-04-25 16:31:01
cve
cve
CVE-2022-28290
2022-04-25 17:15:36
wpexploit
wpexploit
Country Selector < 1.6.6 - Reflected Cross-Site Scripting
2022-04-20 00:00:00
nuclei
nuclei
WordPress Country Selector <1.6.6 - Cross-Site Scripting
2022-05-10 08:47:58
nvd
nvd
CVE-2022-28290
2022-04-25 17:15:36