CVE Database /
CVE-2022-4470
CVE · Medium
CVE-2022-4470 — Widgets for Google Reviews [wp-reviews-plugin-for-google] < 9.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4470
|
Widgets for Google Reviews [wp-reviews-plugin-for-google] < 9.8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 9.8
|
9.8 |
2023-01-05 |
—
|
CVE-2022-4470
The Widgets for Google Reviews plugin for WordPress contained a cross site scripting vulnerability in versions before 9.8 that could allow an attacker to inject malicious scripts into a website. These injected scripts could execute in the browsers of site visitors and potentially redirect them, display advertisements, or perform other malicious actions through HTML payloads. The flaw was discovered by Lana Codes and has been patched in version 9.8 and later.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings