CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 5.4. It affects WordPress.
CVE
CVE-2022-1549
Severity
MEDIUM
CVSS
5.4
EPSS
0.57%
WordPress
Original NVD Description
The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability.
Related CVEs
Other vulnerabilities affecting the same vendor(s)