Skip to content
Sign in
Not rated

CVE-2022-1773 The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an…

Description

The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
WP Athletics 1.1.7 No fix stated

Other CVEs of WP Athletics

The 2 CVEs of WP Athletics →
CVE-2022-1549 The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor… Not rated
Track this CVE