Aller au contenu
Se connecter
6.1 Moyenne

CVE-2022-3440 The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an…

Description

The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present on a page, leading to a Reflected Cross-Site Scripting

Produits et versions touchés

Produit Versions touchées Corrigé en
Rock Convert 2.11 premières → < 2.11.0 2.11.0

Autres CVE de Rock Convert

Les 2 CVE de Rock Convert →
CVE-2022-3441 The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape some of its settings, which could allow… 4.8 Moyenne
Suivre cette CVE