CVE-2022-0627: Amelia < 1.0.46 - Reflected Cross-Site Scripting
Published Mar 21, 2022
·Updated
The Amelia WordPress plugin before 1.0.47 does not sanitize and escape the code parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting.
Affected Software
1 affected component
Tms-outsource Amelia Wordpress<1.0.47
Event History
Mar 21, 2022
CVE Published
via MITRE·06:55 PM
Data Sourced
via MITRE·06:55 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-0627?
CVE-2022-0627 has a medium severity level due to its potential to allow Reflected Cross-Site Scripting attacks.
2
How do I fix CVE-2022-0627?
To fix CVE-2022-0627, update the Amelia WordPress plugin to version 1.0.47 or later.
3
What type of vulnerability is CVE-2022-0627?
CVE-2022-0627 is categorized as a Reflected Cross-Site Scripting (XSS) vulnerability.
4
What are the potential impacts of CVE-2022-0627?
The impacts of CVE-2022-0627 may include unauthorized access to user data and the execution of malicious scripts in the context of the admin page.
5
Who is affected by CVE-2022-0627?
Users of the Amelia WordPress plugin versions prior to 1.0.47 are affected by CVE-2022-0627.