Lucene search
JrXnmWPVDB-ID:B0E551AF-087B-43E7-BDB7-11D7F639028AHistoryJan 18, 2022 - 12:00 a.m.
Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool
2022-01-1800:00:00
JrXnm
wpscan.com
5
reflected cross-site scripting
import tool
admin dashboard
EPSS
0.001
Percentile
31.8%
The plugin does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting
PoC
Related
cve
cve
CVE-2022-0252
2022-02-21 11:15:09
cvelist
cvelist
CVE-2022-0252 Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool
2022-02-21 10:46:09
wpexploit
wpexploit
Give < 2.17.3 - Reflected Cross-Site Scripting via Import Tool
2022-01-18 00:00:00
prion
prion
Cross site scripting
2022-02-21 11:15:00
nvd
nvd
CVE-2022-0252
2022-02-21 11:15:09
patchstack
patchstack
openvas
openvas
WordPress GiveWP Plugin < 2.17.3 Multiple Vulnerabilities
2022-03-01 00:00:00