2 matches found
PT-2022-13511
Name of the Vulnerable Software and Affected Versions IgniteUp WordPress plugin versions through 3.4.1 Description The issue arises when high privilege users do not have the unfiltered html capability, leading to potential Stored Cross-Site Scripting issues due to the lack of sanitization and...
5.4CVSS0.00604EPSS
SaveExploits2References5
CVE-2022-0898: Improper Neutralization of Input During Web Page Generation
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfilteredhtml capability, which could lead to Stored Cross-Site Scripting issues...
5.4CVSS6AI score0.00604EPSS
SaveExploits2References2
20