CVE-2022-2627

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting.
References
Configurations

Configuration 1

cpe:2.3:a:tagdiv:newspaper:*:*:*:*:*:wordpress:*:*

Information

Published : 2022-10-31 04:15

Updated : 2022-11-01 02:02


NVD link : CVE-2022-2627

Mitre link : CVE-2022-2627

Products Affected
No products.
CWE