Vulnerability — CVE-2022-3440

CVE-2022-3440

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-3440
Description:: The Rock Convert WordPress plugin before 2.11.0 does not sanitise and escape an URL before outputting it back in an attribute when a specific widget is present on a page, leading to a Reflected Cross-Site Scripting
Last updated date:: 11/01/2022

Type:: exploit
Confidence:: HIGH
Date of publishing:: 11/01/2022
Reference url to background: https://wpscan.com/vulnerability/e39fcf30-1e69-4399-854c-4c5b6ccc22a2