Files
CVEs-PoC/2022/CVE-2022-0252.md
T
2024-05-25 21:48:12 +02:00

803 B

CVE-2022-0252

Description

The GiveWP WordPress plugin before 2.17.3 does not escape the json parameter before outputting it back in an attribute in the Import admin dashboard, leading to a Reflected Cross-Site Scripting

POC

Reference

Github

No PoCs found on GitHub currently.