Security Advisory
CVE-2022-0189
6.1
MEDIUM
Vulnerability Description
The WP RSS Aggregator WordPress plugin before 4.20 does not sanitise and escape the id parameter in the wprss_fetch_items_row_action AJAX action before outputting it back in the response, leading to a Reflected Cross-Site Scripting
Published Date
February 28, 2022
Official Source
NIST NVD Advisory