CVE-2022-4466

The WordPress Infinite Scroll WordPress plugin before 5.6.0.3 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting...

WordPress Ajax Load More Plugin < 5.6.0.3 is vulnerable to Cross Site Scripting (XSS)

Software Ajax Load More Type Plugin Vulnerable versions 5.6.0.3 Fixed in 5.6.0.3 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-4466 Patch priority Medium CVSS severity Medium 6.5 Developer Claim ownership PSID 33d2d66c78ff Credits Lana Codes Requir...

CVE-2022-4466

creationtimestamp| type| source ---|---|--- 2023-03-13 19:23:22+00:00| seen| https://t.me/cibsecurity/59919...

CVE-2022-4466

CVE-2022-4466 relates to the WordPress Infinite Scroll plugin for WordPress, affecting versions prior to 5.6.0.3. The issue is that the plugin does not validate and escape certain shortcode attributes before rendering them in posts/pages, which can enable stored Cross-Site Scripting (XSS) by user...