CVE-2022-0428: Content Egg < 5.3.0 - Reflected Cross-Site Scripting
Published May 2, 2022
·Updated
The Content Egg WordPress plugin before 5.3.0 does not sanitise and escape the page parameter before outputting back in an attribute in the Autoblogging admin dashboard, leading to a Reflected Cross-Site Scripting
Affected Software
1 affected component
Keywordrush Content Egg Wordpress<5.3.0
Event History
May 2, 2022
CVE Published
via MITRE·04:05 PM
Data Sourced
via MITRE·04:05 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this vulnerability?
The vulnerability ID of this vulnerability is CVE-2022-0428.
2
What is the severity of CVE-2022-0428?
CVE-2022-0428 has a severity of medium with a severity value of 6.1.
3
What is the affected software for CVE-2022-0428?
The affected software for CVE-2022-0428 is the Content Egg WordPress plugin before version 5.3.0.
4
What is the CWE ID for CVE-2022-0428?
The CWE ID for CVE-2022-0428 is 79.
5
How can I fix CVE-2022-0428?
To fix CVE-2022-0428, you should update the Content Egg WordPress plugin to version 5.3.0 or later.