← CVE Intelligence

CVE-2022-2173

Advanced Database Cleaner < 3.1.1 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Advanced Database Cleaner WordPress plugin before 3.1.1 does not escape numerous generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Affected (CNA)

Vendor / productVersions
Unknown / Advanced Database Cleaneraffected 3.1.1 before 3.1.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.