Vulnerabilities and Security Researches

Flexi – Guest Submit, CVE-2022-0449

CVE, Research URL: CVE-2022-0449
Home page URL: Security reports for Flexi – Guest Submit
Application: Flexi – Guest Submit
Published on: Mar 14, 2022
Research Description: The Flexi WordPress plugin before 4.20 does not sanitise and escape various parameters before outputting them back in some pages such as the user dashboard, leading to a Reflected Cross-Site Scripting
Affected versions: Min -, max 4.20.
Status: vulnerable