CVE-2022-1241
The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues
- Score
- CVSS 3.1 6.1 Medium
- Status
- Modified - contact@wpscan.com
- Published
- 2022-06-08
- Last modified
- 2024-08-02
- Weaknesses
- CWE-79
Affected products
References
- https://wpscan.com/vulnerability/3258393a-eafb-4356-994e-2ff8ce223c9b