CVE-2022-4793: Improper Neutralization of Input During Web Page Generation

The Blog Designer WordPress plugin before 2.4.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack...

PT-2023-15532

Name of the Vulnerable Software and Affected Versions The Blog Designer WordPress plugin versions prior to 2.4.1 Description The issue concerns a Stored Cross-Site Scripting attack. Users with a role as low as contributor could exploit this due to the lack of validation and escaping of one of the...