Skip to content
OpenAdvisories

Archive

2 February 2023

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2022-2546 Public exploit Scanner template

    All-in-One WP Migration < 7.63 - Unauthenticated Reflected XSS

    The All-in-One WP Migration WordPress plugin before 7.63 uses the wrong content type, and does not properly escape the response from the ai1wm_export AJAX action, allowing an attacker to craft a request that when submitted by any visitor will inject arbitrary…