CVE-2022-4508

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:21+00:00| seen| https://t.me/cibsecurity/56548...

CVE-2022-4508 ConvertKit < 2.0.5 - Contributor+ Stored XSS

The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high-privile...

CVE-2022-4508

The vulnerability CVE-2022-4508 affects the ConvertKit WordPress plugin prior to version 2.0.5. The issue is due to insufficient validation and escaping of shortcode attributes, allowing stored XSS from inputs supplied by users with as low as contributor roles, potentially affecting admins. Affec...

CVE-2022-4508 ConvertKit < 2.0.5 - Contributor+ Stored XSS

The ConvertKit WordPress plugin before 2.0.5 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high-privile...