6.1
Moyenne
CVE-2022-2627 The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via…
Description
The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Newspaper 12 | premières → < 12 | 12 |