← Database

CVE-2022-2181

MEDIUM CVSS: 6.1 Published: 2022-08-01 Modified: 2026-06-17

Description

The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

Affected Platforms

Sigmaplugin Advanced Wordpress Reset

Weakness Type

CWE-79

References