← Database

CVE-2022-29430

MEDIUM CVSS: 4.7 Published: 2022-05-20 Modified: 2026-06-17

Description

Cross-Site Scripting (XSS) vulnerability in KubiQ's PNG to JPG plugin <= 4.0 at WordPress via Cross-Site Request Forgery (CSRF). Vulnerable parameter &jpg_quality.

Affected Platforms

Png To Jpg Project Png To Jpg

Weakness Type

CWE-79, CWE-352

References