Skip to content
OpenAdvisories
Unscored CVE-2022-1241 EUVD-2022-24576GHSA-94q2-7v88-792r

Ask Me < 6.8.2 - Reflected Cross-Site Scripting

Published Jun 6, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The Ask me WordPress theme before 6.8.2 does not properly sanitise and escape several of the fields in the Edit Profile page, leading to Reflected Cross-Site Scripting issues

Affected products

VendorProductAffectedFixed
— Ask me 6.8.2 – < 6.8.2 6.8.2

References