Skip to content
OpenAdvisories
Medium · 4.7 CVE-2022-23980 EUVD-2022-28895GHSA-grr7-cf92-3q93

WordPress Yasr – Yet Another Stars Rating plugin <= 2.9.9 - Cross-Site Scripting (XSS) vulnerability

Published Feb 4, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Dario Curvino Product: Yasr – Yet Another Stars Rating (WordPress plugin) Category: Web / CMS

Description

Cross-Site Scripting (XSS) vulnerability discovered in Yasr – Yet Another Stars Rating WordPress plugin (versions <= 2.9.9), vulnerable at parameter 'source'.

Affected products

VendorProductAffectedFixed
Dario Curvino Yasr – Yet Another Stars Rating (WordPress plugin) <= 2.9.9 – ≤ 2.9.9 —

References