CVE-2022-1171

MEDIUM 6.1CVE-2022-1171 · Published 09/05/2022 · updated 17/06/2026

In short

CVE-2022-1171 is a MEDIUM (CVSS 6.1) vulnerability affecting vertical scroll recent post (vertical scroll recent post project).
Chance of exploitation in the next 30 days (EPSS): 0.80%, higher than 56.8% of all vulnerabilities.
Fix: update to 14.0 or later.

Package	Affected versions	Patched versions
vertical scroll recent post vertical_scroll_recent_post_project	`< 14.0`	`14.0`

Description

The Vertical scroll recent post WordPress plugin before 14.0 does not sanitise and escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/dc5eace4-542f-47e9-b870-a6aae6a38b0f · Exploit

CVE-2022-1171

In short

Description

References

More vulnerabilities in vertical scroll recent post

CVE-2022-1171

In short

Description

References

More vulnerabilities in vertical scroll recent post