CVE-2022-1567 — WP JS <= 2.0.6 - Reflected Cross-Site Scripting
The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be …
Published: 2022-05-10 · CVSS: 6.1 · CVSS 3.1
The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7