Skip to content
Sign in
Not rated

CVE-2022-2173 The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting…

Description

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
Advanced Database Cleaner 3.1 earliest → < 3.1.1 3.1.1

Other CVEs of Advanced Database Cleaner

The 3 CVEs of Advanced Database Cleaner →
CVE-2021-24921 The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before… Not rated CVE-2021-24141 Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high… Not rated
Track this CVE