← Database

CVE-2022-0206

MEDIUM CVSS: 6.1 Published: 2022-02-14 Modified: 2026-06-17

Description

The NewStatPress WordPress plugin before 1.3.6 does not properly escape the whatX parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

Affected Platforms

Newstatpress Project Newstatpress

Weakness Type

CWE-79

References