Vulnerabilities > CVE-2022-2311 - Unspecified vulnerability in Find and Replace ALL Project Find and Replace ALL

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
find-and-replace-all-project

Summary

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.

Vulnerable Configurations

Part Description Count
Application
Find_And_Replace_All_Project
1