Skip to content
OpenAdvisories
Unscored CVE-2022-0428 EUVD-2022-15570GHSA-g7r4-c4q3-g2pj

Content Egg < 5.3.0 - Reflected Cross-Site Scripting

Published May 2, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffectedFixed
— Content Egg 5.3.0 – < 5.3.0 5.3.0

References