Beveiligingsadvies

CVE-2022-50970

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-10 12:13:01

Laatst bijgewerkt 2026-05-24 01:37:35

Toegewezen door VulnCheck

CVSS-score 5.4

Status PUBLISHED

Beschrijving

WordPress Plugin AAWP 3.16 contains a reflected cross-site scripting vulnerability that allows authenticated attackers to inject malicious scripts by manipulating the tab parameter. Attackers can craft URLs with XSS payloads in the tab parameter of the aawp-settings admin page to execute arbitrary JavaScript in the context of authenticated users.

← Alle CVE's bekijken Bekijk op cve.org ↗