Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:wp_athletics:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductWp Athletics (ebcf2c13-a0dc-53a9-a1e4-4574deb36ed7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1773 vulnerable 2026-06-08 05:39:13.887460 WP Athletics <= 1.1.7 - Reflected Cross-Site Scripting
The WP Athletics WordPress plugin through 1.1.7 does not sanitise and escape a parameter before outputting back in an admin page, leading to a Reflected Cross-Site Scripting
Published: 2022-06-13T12:42:46.000Z
Updated: 2024-08-03T00:16:59.886Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-1549 vulnerable 2026-06-08 05:39:13.404095 WP Athletics <= 1.1.7 - Subscriber+ Stored Cross-Site Scripting
The WP Athletics WordPress plugin through 1.1.7 does not sanitize parameters before storing them in the database, nor does it escape the values when outputting them back in the admin dashboard, leading to a Stored Cross-Site Scripting vulnerability.
Published: 2022-06-13T12:41:56.000Z
Updated: 2024-08-03T00:10:03.671Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.