CVE-2022-2311

Published: Nov 28, 2022Modified: Jun 17, 2026

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

The Find and Replace All WordPress plugin before 1.3 does not sanitize and escape some parameters from its setting page before outputting them back to the user, leading to a Reflected Cross-Site Scripting issue.

Affected (1)

Products: Find And Replace All Project: Find And Replace All

Find And Replace All Project

1 product

Find And Replace All

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Find And Replace All Project Find And Replace All	version < 1.3

References (2)

https://wpscan.com/vulnerability/287a14dc-d1fc-481d-84af-7eb172dc68c9

Source: contact@wpscan.com

ExploitThird Party Advisory

https://wpscan.com/vulnerability/287a14dc-d1fc-481d-84af-7eb172dc68c9

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.