Medium · 5.9 CVE-2022-47171 EUVD-2022-49946GHSA-wmqm-3p7c-c6j7

WordPress IP Vault – WP Firewall Plugin <= 1.1 is vulnerable to Cross Site Scripting (XSS)

Published Mar 14, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Paul C. Schroeder Product: IP Vault – WP Firewall

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Paul C. Schroeder IP Vault – WP Firewall plugin <= 1.1 versions.

Affected products

Vendor	Product	Affected	Fixed
Paul C. Schroeder	IP Vault – WP Firewall	≤ 1.1	—

References

https://patchstack.com/database/vulnerability/ip-vault-wp-firewall/wordpress-ip-vault-wp-firewall-plugin-1-1-cross-site-scripting-xss?_s_id=cve vdb-entry