CVE-2022-29415 – WordPress Ravpage plugin <= 2.16 - Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability

https://notcve.org/view.php?id=CVE-2022-29415

28 Apr 2022 — Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 at WordPress. Una vulnerabilidad de tipo Cross-Site Scripting (XSS) Reflejado no Autenticado en el plugin Ravpage versiones anteriores a 2.16 incluyéndola, de Mati Skiba @ Rav Messer en WordPress Rav Messer's Ravpage <= 2.16 is vulnerable to Cross-Site Scripting exploitable by unauthenticated attackers. Versions up to 2.16 are affected. • https://patchstack.com/database/vulnerability/ravpage/wordpress-ravpage-plugin-2-16-unauthenticated-reflected-cross-site-scripting-xss-vulnerability • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •