CVE-2022-1387 No Future Posts <= 1.4 - Admin+ Stored Cross-Site Scripting

2022-05-3008:35:44

CWE-79

WPScan

www.cve.org

0.001 Low

EPSS

Percentile

25.0%

JSON

The No Future Posts WordPress plugin through 1.4 does not escape its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

CNA Affected

[
  {
    "product": "No Future Posts",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThanOrEqual": "1.4",
        "status": "affected",
        "version": "1.4",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/48252ffb-f21c-4e2a-8f78-bdc7164e7347

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for CVELIST:CVE-2022-1387