← Database

CVE-2022-1597

MEDIUM CVSS: 6.1 Published: 2022-06-08 Modified: 2026-06-17

Description

The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks

Affected Platforms

2Code Wpqa Builder

Weakness Type

CWE-79

References