0.001 Low
EPSS
Percentile
30.8%
The plugin contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user, leading to a Reflected Cross-Site Scripting
www.wordfence.com/vulnerability-advisories/#CVE-2022-1567