Veille CVE

Recherche « Getaawp WordPress Plugin AAWP »

1 CVE

Critique 0 Élevée 0 Moyenne 1 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Getaawp WordPress Plugin AAWP » ✕
  1. CVE-2022-50970 5.4 Moyenne

    Getaawp WordPress Plugin AAWP

    WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter. Attackers can craft URLs with XSS payloads in the tab parameter of the aawp-settings admin page to execute arbitrary JavaScript in the context of authenticated users.