CVE-2022-4760

creationtimestamp| type| source ---|---|--- 2023-01-23 18:25:11+00:00| seen| https://t.me/cibsecurity/56841...

CVE-2022-4760 OneClick Chat to Order < 1.0.4.2 - Contributor+ Stored XSS via Shortcode

The OneClick Chat to Order WordPress plugin before 1.0.4.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against hi...

CVE-2022-4760 OneClick Chat to Order < 1.0.4.2 - Contributor+ Stored XSS via Shortcode

The OneClick Chat to Order WordPress plugin before 1.0.4.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against hi...

CVE-2022-4760

The OneClick Chat to Order WordPress plugin is affected prior to version 1.0.4.2. The underlying issue is failure to validate and escape certain shortcode attributes before displaying them, enabling Stored XSS by low-privilege users (contributor) that could impact high-privilege admins. Underlyin...