https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T06:11:52.782878+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-1567 CVE-2022-1567 — WP JS <= 2.0.6 - Reflected Cross-Site Scripting 2026-10-06T06:11:52.799398+00:00

Affected: halmat WP JS

The WP-JS plugin for WordPress contains a script called wp-js.php with the function wp_js_admin, that accepts unvalidated user input and echoes it back to the user. This can be used for reflected Cross-Site Scripting in versions up to, and including, 2.0.6.