Not rated
CVE-2022-1527 The WP 2FA WordPress plugin before 2.2.1 does not sanitise and escape a parameter before outputting it back in an…
Description
The WP 2FA WordPress plugin before 2.2.1 does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP 2FA – Two-factor authentication for WordPress 2.2 | earliest → < 2.2.1 | 2.2.1 |