← Database

CVE-2022-23980

MEDIUM CVSS: 4.7 Published: 2022-02-04 Modified: 2026-06-17

Description

Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.

Affected Platforms

Yet Another Stars Rating Project Yet Another Stars Rating

Weakness Type

CWE-79, CWE-79

References