Description
Cross-Site Scripting (XSS) vulnerability in Dario Curvino Yasr – Yet Another Stars Rating plugin <= 3.1.2 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dario Curvino | Yasr – Yet Another Stars Rating | ≤ 3.1.2 | — |
Medium · 5.4
CVE-2022-40699
EUVD-2022-43970GHSA-vq77-w3cf-rw37
WordPress Yet Another Stars Rating Plugin <= 3.1.2 is vulnerable to Cross Site Scripting (XSS)
Published Mar 16, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack