← Database

CVE-2022-0252

MEDIUM CVSS: 6.1 Published: 2022-02-21 Modified: 2026-06-17

Description

The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting

Affected Platforms

Givewp Givewp

Weakness Type

CWE-79

References