CVE-2022-2311
Find and Replace All < 1.3 - Reflected Cross Site Scripting
- State
- Published
- Severity
- 6.1 Medium
- Published
- Nov 28, 2022
- Updated
- Apr 23, 2025
- Reserved
- Jul 5, 2022
Description
The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.1 Medium | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N | CISA-ADP |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Find and Replace AllUnknown |
|
References
- https://wpscan.com/vulnerability/287a14dc-d1fc-481d-84af-7eb172dc68c9exploittechnical-description
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.