CVE-2022-0627
Assigner: WPScan
Published: 2022-03-21T18:55:51
State: PUBLISHED
affected: product: Amelia – Events & Appointments Booking Calendar
vendor: Unknown
versions: lessThan: 1.0.47
status: affected
version: 1.0.47
versionType: custom
credits: value: Ran Crane
descriptions: value: The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Amelia < 1.0.46 - Reflected Cross-Site Scripting
x_generator: WPScan CVE Generator