Skip to content
Sign in
6.1 Medium

CVE-2022-2627 The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via…

Description

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting.

Affected products and versions

Product Affected versions Fixed in
Newspaper 12 earliest → < 12 12

Other CVEs of Newspaper

The 2 CVEs of Newspaper →
CVE-2022-2167 The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via… 6.1 Medium
Track this CVE