CVE-2022-2378
Assigner: WPScan
Published: 2022-08-15T08:37:09
State: PUBLISHED
affected: product: Easy Student Results
vendor: Unknown
versions: lessThanOrEqual: 2.2.8
status: affected
version: 2.2.8
versionType: custom
credits: value: Raad Haddad
descriptions: value: The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting
problemTypes: descriptions: cweId: CWE-79
description: CWE-79 Cross-Site Scripting (XSS)
type: CWE
source: discovery: EXTERNAL
title: Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting
x_generator: WPScan CVE Generator