CVE-2022-3484

The WPB Show Core WordPress plugin through TODO does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting

Date published : 2022-11-14

https://wpscan.com/vulnerability/3afaed61-6187-4915-acf0-16e79d5c2464