← Database

CVE-2022-2167

MEDIUM CVSS: 6.1 Published: 2022-10-31 Modified: 2026-06-17

Description

The Newspaper WordPress theme before 12 does not sanitise a parameter before outputting it back in an HTML attribute via an AJAX action, leading to a Reflected Cross-Site Scripting

Affected Platforms

Tagdiv Newspaper

Weakness Type

CWE-79

References