CVE-2022-1047

PoC —

CVSS 3.1

6.1 medium

EPSS

<1%p54

Published

May 9, 2022 (May 9, 2022)

Modified

Jun 17, 2026

Description

The Themify Post Type Builder Search Addon WordPress plugin before 1.4.0 does not properly escape the current page URL before reusing it in a HTML attribute, leading to a reflected cross site scripting vulnerability.

Vendors: themify
Products: post type builder search addon
Ecosystems: WordPress
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.8%)

In the news0 stories

No ingested article mentions this CVE yet.