Skip to content

Known CVE

Unyson < 2.7.27 - Cross Site Scripting

The plugin does not sanitise and escape the QUERY_STRING before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting in browsers which do not encode characters

CVE-2022-2219

High2022CVSS 7.2CWE-79

cve2022 · authenticated · wordpress · wp · xss · unyson · wp-plugin · wpscan

Verified scans run this check after you prove you own the site.

All known CVEsView the checks catalogNational Vulnerability Database

Scan a website