← Database

CVE-2022-0429

MEDIUM CVSS: 6.1 Published: 2022-03-07 Modified: 2026-06-17

Description

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.

Affected Platforms

Cerber Wp Cerber Security\, Anti-Spam \& Malware Scan

Weakness Type

CWE-79, CWE-79

References