Skip to content
OpenAdvisories
Unscored CVE-2022-1267 EUVD-2022-24600GHSA-2pgw-6775-r4r8

BMI BMR Calculator <= 1.3 - Reflected Cross-Site Scripting

Published May 16, 2022 · Updated Aug 2, 2024 · Assigned by WPScan

Description

The BMI BMR Calculator WordPress plugin through 1.3 does not sanitise and escape arbitrary POST data before outputting it back in the response, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffectedFixed
— BMI BMR Calculator 1.3 – ≤ 1.3 —

References