CVE-2022-2181 – Advanced WordPress Reset < 1.6 - Reflected Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2022-2181

05 Jul 2022 — The Advanced WordPress Reset WordPress plugin before 1.6 does not escape some generated URLs before outputting them back in href attributes of admin dashboard pages, leading to Reflected Cross-Site Scripting El plugin Advanced WordPress Reset de WordPress versiones anteriores a 1.6, no escapa a algunas URLs generadas antes de devolverlas en los atributos href de las páginas del panel de control del administrador, conllevando a un ataque de tipo Cross-Site Scripting Reflejado The Advanced WordPress Reset plu... • https://wpscan.com/vulnerability/68ddf343-6e69-44a7-bd33-72004053d41e • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •