Lucene search

K
osvGoogleOSV:CVE-2022-4362
HistoryJan 02, 2023 - 10:15 p.m.

CVE-2022-4362

2023-01-0222:15:17
Google
osv.dev
6
wordpress
plugin
stored xss

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%

The Popup Maker WordPress plugin before 1.16.9 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.5%