Skip to content
Sign in
Not rated

CVE-2022-1269 The Fast Flow WordPress plugin before 1.2.12 does not sanitise and escape the page parameter before outputting back in…

Description

The Fast Flow WordPress plugin before 1.2.12 does not sanitise and escape the page parameter before outputting back in an attribute in an admin dashboard, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
Fast Flow 1.2 earliest → < 1.2.12 1.2.12

Other CVEs of Fast Flow

The 2 CVEs of Fast Flow →
CVE-2022-2775 The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow… Not rated
Track this CVE