Vulnerabilities > CVE-2022-2181 - Unspecified vulnerability in Sigmaplugin Advanced Wordpress Reset
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |