Skip to content
OpenAdvisories

Vendor

halmat

1 known vulnerabilities.

Products

WP JS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2022-1567

    WP JS <= 2.0.6 - Reflected Cross-Site Scripting

    The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.

    halmat WP JS Web / CMS