CVE-2022-1167 CareerUp < 2.3.1 - Unauthenticated Reflected Cross-Site Scripting

2022-04-0415:36:06

CWE-79

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

34.4%

JSON

There are unauthenticated reflected Cross-Site Scripting (XSS) vulnerabilities in CareerUp Careerup WordPress theme before 2.3.1, via the filter parameters.

CNA Affected

[
  {
    "product": "Careerup",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "2.3.1",
        "status": "affected",
        "version": "2.3.1",
        "versionType": "custom"
      }
    ]
  }
]