medium6.1
CVE-2022-2181
The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard …
Impact
The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sigmaplugin | Advanced Wordpress Reset | before 1.6 |