CVE-2022-1047CWE-79

Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting

published May 9, 2022

CVSS
—
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00800 · 56.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-05-09T16:50Z
EPSS history
Timeline
  • 09 MAY 16:50Z
    Themify - Post Type Builder Search Addon < 1.4.0 - Reflected Cross-Site Scripting
    cvelistv5