CVE

CVE-2022-28290

6.1

CVSS

Description

Reflective Cross-Site Scripting vulnerability in WordPress Country Selector Plugin Version 1.6.5. The XSS payload executes whenever the user tries to access the country selector page with the specified payload as a part of the HTTP request

Attack Vector

Privileges Req.

User Interaction

wordpress country selector plugin

Updated Sep 28, 2026View on NVD →

S4E scanner

mediumProduct Based Web Vulnerabilities~10 seconds

CVE-2022-28290 Scanner

CVE-2022-28290 scanner - Cross-Site Scripting (XSS) vulnerability in Country Selector plugin for WordPress

Used 2.7k times · 3.4k assets checked · domain, ipv4, subdomain

Scanner page →Run scanner

Monitor this CVE on your assets

S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.

Create a free account →