Skip to content
OpenAdvisories
Unscored CVE-2022-2378 EUVD-2022-34645GHSA-vr4q-67qg-vvf6

Easy Student Results <= 2.2.8 - Reflected Cross-Site Scripting

Published Aug 15, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The Easy Student Results WordPress plugin through 2.2.8 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Affected products

VendorProductAffectedFixed
— Easy Student Results 2.2.8 – ≤ 2.2.8 —

References