Not rated
CVE-2022-0471 The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the…
Description
The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Favicon by RealFaviconGenerator 1.3 | earliest → < 1.3.23 | 1.3.23 |