CVE Daily

CVE-2022-2311

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escap...

Medium CVSS 6.1

Overview

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.

CWE: N/A Published: 2022-11-28T14:15:11.487
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.1 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags