← CVE Intelligence

CVE-2022-1047

Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.

Affected (CNA)

Vendor / productVersions
Unknown / themify-ptb-searchaffected 1.4.0 before 1.4.0

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.