CVE-2022-0429

CVE-2022-0429: WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Unauthenticated Stored Cross-Site Scripting

Vendor Unknown
Product WP Cerber Security, Anti-spam & Malware Scan
Weakness CWE-79 · XSS
Published March 7, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.

Key dates

02Disclosure timeline

March 7, 2022 CVE published
August 2, 2024 Record updated