Vulnerabilities > CVE-2022-1597 - Unspecified vulnerability in 2Code Wpqa Builder 5.2
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |