QwikSec

Security Database

CVE

CWE

Training

CVE-2022-1906

Published: Aug 1, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

The Copyright Proof WordPress plugin through 4.16 does not sanitise and escape a parameter before outputting it back via an AJAX action available to both unauthenticated and authenticated users, leading to a Reflected Cross-Site Scripting when a specific setting is enabled.

Vendor	Product	Versions
Unknown	Copyright Proof	affected `4.16 - <= 4.16`

Weaknesses (CWE)

References

https://wpscan.com/vulnerability/af4f459e-e60b-4384-aad9-0dc18aa3b338

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.