VYPR

Wp Js

by Wp Js Project

CVEs (1)

CVESevRiskCVSSEPSSKEVPublishedDescription
CVE-2022-1567Med0.406.10.00May 10, 2022The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.