← Database

CVE-2022-0189

MEDIUM CVSS: 6.1 Published: 2022-02-28 Modified: 2026-06-17

Description

The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response, leading to a Reflected Cross-Site Scripting

Affected Platforms

Wprssaggregator Wp Rss Aggregator

Weakness Type

CWE-79, CWE-79

References