CVE Vulnerability

CWE-79

CVE-2022-0268

by

Cross-site Scripting (XSS) – Stored in Packagist getgrav/grav prior to 1.7.28.

CVE-2022-0271

by

The LearnPress WordPress plugin before 4.1.6 does not sanitise and escape the lp-dismiss-notice before outputting it back via the lp_background_single_email AJAX action, leading to a Reflected Cross-Site Scripting

CVE-2022-0274

by

Cross-site Scripting (XSS) – Stored in NuGet OrchardCore.Application.Cms.Targets prior to 1.2.2.

CVE-2022-0278

by

Cross-site Scripting (XSS) – Stored in Packagist microweber/microweber prior to 1.2.11.

CVE-2022-0285

by

Cross-site Scripting (XSS) – Stored in Packagist pimcore/pimcore prior to 10.2.9.

CVE-2022-0288

by

The Ad Inserter WordPress plugin before 2.7.10, Ad Inserter Pro WordPress plugin before 2.7.10 do not sanitise and escape the html_element_selection parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting