Lucene search
Utkarsh AgrawalWPEX-ID:0260D5C0-52A9-44CE-B7BE-AFF642056D16HistoryMay 06, 2022 - 12:00 a.m.
WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
2022-05-0600:00:00
Utkarsh Agrawal
68
wordpress
2fa
cross-site scripting
EPSS
0.001
Percentile
40.2%
The plugin does not sanitise and escape a parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting
https://example.com/wp-admin/admin.php?page=wp-2fa-settings&settings_error=<svg/onload=prompt(/XSS/)>Related
prion
prion
Cross site scripting
2022-05-30 09:15:00
wpvulndb
wpvulndb
WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
2022-05-06 00:00:00
cnvd
cnvd
WordPress WP 2FA plugin cross-site scripting vulnerability
2022-06-01 00:00:00
nvd
nvd
CVE-2022-1527
2022-05-30 09:15:09
cvelist
cvelist
CVE-2022-1527 WP 2FA < 2.2.1 - Reflected Cross-Site Scripting
2022-05-30 08:35:48
patchstack
patchstack
cve
cve
CVE-2022-1527
2022-05-30 09:15:09
kitploit
kitploit