Medium severity6.1NVD Advisory· Published Mar 21, 2022· Updated Jun 17, 2026
CVE-2022-0628
CVE-2022-0628
Description
The Mega Menu WordPress plugin before 3.0.8 does not sanitize and escape the _wpnonce parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:accesspressthemes:ap_mega_menu:*:*:*:*:*:wordpress:*:*Range: <3.0.8
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <3.0.8
Patches
Vulnerability mechanics
References
2- wpscan.com/vulnerability/af9787ee-c496-4f02-a22c-c8f8a97ad902nvdExploitThird Party Advisory
- plugins.trac.wordpress.org/changeset/2684307nvdThird Party Advisory
News mentions
0No linked articles in our index yet.