Skip to content
Sign in
Not rated

CVE-2022-2378 The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it…

Description

The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product Affected versions Fixed in
Easy Student Results 2.2.8 No fix stated

Other CVEs of Easy Student Results

The 2 CVEs of Easy Student Results →
CVE-2022-2379 The Easy Student Results WordPress plugin through 2.2.8 lacks authorisation in its REST API, allowing unauthenticated… Not rated
Track this CVE