← Back

Wp Js

wp-js

Vendor: Wp Js Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-1567
1Wp Js Project
1Wp Js
Jun 17, 2026
May 10, 2022
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in...Show more
The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.Show less