← Database

CVE-2022-28290

MEDIUM CVSS: 6.1 Published: 2022-04-25 Modified: 2026-06-17

Description

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request

Affected Platforms

Welaunch Wordpress Country Selector

Weakness Type

CWE-79, CWE-79

References