Aller au contenu
Se connecter
Non notée

CVE-2022-2173 The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting…

Description

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Produits et versions touchés

Produit Versions touchées Corrigé en
Advanced Database Cleaner 3.1 premières → < 3.1.1 3.1.1

Autres CVE de Advanced Database Cleaner

Les 3 CVE de Advanced Database Cleaner →
CVE-2021-24921 The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $_GET keys and values before… Non notée CVE-2021-24141 Unvaludated input in the Advanced Database Cleaner plugin, versions before 3.0.2, lead to SQL injection allowing high… Non notée
Suivre cette CVE