CVE-2022-1436

The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitise and escape the wpcargo_tracking_number parameter before outputting it back in the page, which could allow attackers to perform reflected Cross-Site Scripting attacks.

Date published : 2022-05-16

https://wpscan.com/vulnerability/d5c6f894-6ad1-46f4-bd77-17ad9234cfc3