CVE-2022-4507

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:28+00:00| seen| https://t.me/cibsecurity/56552 2025-04-04 18:36:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10526...

CVE-2022-4507 Real Cookie Banner < 3.4.10 - Contributor+ Stored XSS

The Real Cookie Banner WordPress plugin before 3.4.10 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins...

CVE-2022-4507

CVE-2022-4507 affects the Real Cookie Banner WordPress plugin up to version 3.4.10. The vulnerability arises from insufficient validation and escaping of shortcode attributes, enabling stored XSS where a contributor may inject script that runs in admins’ logged-in sessions. The issue is confirmed...