CVE-2022-2391

creationtimestamp| type| source ---|---|--- 2022-08-08 18:24:05+00:00| seen| https://t.me/cibsecurity/47748...

CVE-2022-2391 Inspiro Pro < 7.2.3 - Contributor+ Stored Cross-Site Scripting

The Inspiro PRO WordPress plugin does not sanitize the portfolio slider description, allowing users with privileges as low as Contributor to inject JavaScript into the description...

CVE-2022-2391

CVE-2022-2391 affects the Inspiro PRO WordPress plugin. The issue stems from inadequate sanitization of the portfolio slider description, enabling stored cross-site scripting where users with privileges as low as Contributor can inject JavaScript. Affected: Inspiro PRO WordPress plugin versions e...