CVE-2022-0471

CVE-2022-0471: Favicon by RealFaviconGenerator < 1.3.23 - Reflected Cross-Site Scripting

Vendor Unknown

Product Favicon by RealFaviconGenerator

Weakness CWE-79 · XSS

Published April 11, 2022

Last update August 2, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Favicon by RealFaviconGenerator WordPress plugin before 1.3.23 does not properly sanitise and escape the json_result_url parameter before outputting it back in the Favicon admin dashboard, leading to a Reflected Cross-Site Scripting issue

Key dates

02Disclosure timeline

April 11, 2022 CVE published

August 2, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-0471

Related vulnerabilities

04Related CVE

CVE-2024-30433 WordPress MultiVendorX Marketplace plugin <= 4.1.3 - Cross Site Scripting (XSS) vulnerability CVE-2025-24530 CVE-2021-24372 WP Hardening < 1.2.2 - Reflected XSS via URI CVE-2024-3414 SourceCodester Human Resource Information System addcorporate_process.php cross site scripting CVE-2021-24466 Verse-O-Matic <= 4.1.1 - CSRF to Stored XSS