CVE Database
/

CVE-2022-0620

Back to search

CVE-2022-0620

Published: Mar 28, 2022

Modified: Aug 2, 2024

PUBLISHED

Description

The Delete Old Orders WordPress plugin through 0.2 does not sanitize and escape the date parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.

VendorProductVersions

Unknown

Delete Old Orders

affected
0.2 - <= 0.2

Weaknesses (CWE)

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now