medium6.1
CVE-2022-3440
The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present…
Impact
The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present on a page, leading to a Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rockcontent | Rock Convert | before 2.11.0 |