6.1 Medium

CVE-2022-3908 The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the…

Description

The Helloprint WordPress plugin before 1.4.7 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Affected products and versions

Product	Affected versions	Fixed in
Plug your WooCommerce into the largest catalog of customized print products from Helloprint 1.4	earliest → < 1.4.7	1.4.7

Do you use Plug your WooCommerce into the largest catalog of customized print products from Helloprint?

Track this CVE Watch Plug your WooCommerce into the largest catalog of customized print products from Helloprint Check my SBOMs

www.cveye.io/en/cve/CVE-2022-3908

Timeline

Published December 12, 2022
Last modified April 22, 2025

References

wpscan.com wpscan.com

Track this CVE