Skip to content
Not rated

CVE-2022-1220 The FoxyShop WordPress plugin before 4.8.2 does not sanitise and escape a parameter before outputting it back in an…

Description

The FoxyShop WordPress plugin before 4.8.2 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
FoxyShop 4.8 earliest → < 4.8.2 4.8.2
Track this CVE