CVE-2022-1192

The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2022-05-23

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Turn Off All Comments (Turn Off All Comments Project)
• Turn Off All Comments (Unknown)

References

• https://wpscan.com/vulnerability/18660c71-5a89-4ef6-b0dd-7a166e3449d6