CVE-2022-1904CWE-79

Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting

published June 27, 2022

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.1 does not sanitise and escape parameter before outputting it back in a page available to any user (both authenticated and unauthenticated) when a specific setting is enabled, leading to a Reflected Cross-Site Scripting

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01480 · 73.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-06-27T08:58Z
EPSS history
Timeline
  • 27 JUN 08:58Z
    Easy Pricing Tables < 3.2.1 - Reflected Cross-Site-Scripting
    cvelistv5