2 matches found
CVE-2022-2398
The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
4.8CVSS6.2AI score0.0061EPSS
SaveExploits2References1
CVE-2022-2398: Improper Neutralization of Input During Web Page Generation
The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfilteredhtml is disallowed...
4.8CVSS5.7AI score0.0061EPSS
SaveExploits2References2
20