Back to feed
EUVD-2022-24532 · Published May 23, 2022
The Turn off all comments WordPress plugin through 1.0 does not sanitise and escape the rows parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
Technologies
Turn_Off_All_Comments_Project Turn Off All Comments
Weaknesses
CWE-79
CVSS scores
- v3.16.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - v2.04.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
