CVE-2022-4330

The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-4330

creationtimestamp| type| source ---|---|--- 2023-01-16 18:24:25+00:00| seen| https://t.me/cibsecurity/56549...

CVE-2022-4330

CVE-2022-4330 affects the WP Attachments WordPress plugin prior to 5.0.6. The vulnerability arises because the plugin does not sanitise and escape some of its settings, enabling stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, such as in multisite setups....

CVE-2022-4330 WP Attachments < 5.0.6 - Admin+ Stored XSS

The WP Attachments WordPress plugin before 5.0.6 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...