CVE-2022-2181

MEDIO 6.1CVE-2022-2181 · Published 01/08/2022 · updated 17/06/2026

In breve

CVE-2022-2181 è una vulnerabilità MEDIO (CVSS 6.1) che riguarda advanced wordpress reset (sigmaplugin).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.69%, superiore al 53.0% delle vulnerabilità.
Correzione: aggiornare a 1.6 o successiva.

Package	Affected versions	Patched versions
advanced wordpress reset sigmaplugin	`< 1.6`	`1.6`

Description

The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/68ddf343-6e69-44a7-bd33-72004053d41e · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free