← Database

CVE-2022-3209

MEDIUM CVSS: 6.1 Published: 2022-10-10 Modified: 2026-06-17

Description

The soledad WordPress theme before 8.2.5 does not sanitise the {id,datafilter[type],...} parameters in its penci_more_slist_post_ajax AJAX action, leading to a Reflected Cross-Site Scripting (XSS) vulnerability.

Affected Platforms

Pencidesign Soledad

Weakness Type

CWE-79

References