CVE-2022-1559

The Clipr WordPress plugin through 1.2.3 does not sanitise and escape its API Key settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfilteredhtml capability is disallowed...

Cross site scripting

The Clipr WordPress plugin through 1.2.3 does not sanitise and escape its API Key settings before outputting it in an attribute, leading to a Stored Cross-Site Scripting issue even when the unfilteredhtml capability is disallowed...

PT-2022-13959

Name of the Vulnerable Software and Affected Versions Clipr WordPress plugin versions 1.2.3 and earlier Description The issue is related to a Stored Cross-Site Scripting problem. It occurs because the Clipr WordPress plugin does not properly sanitise and escape its API Key settings before...