2 matches found
CVE-2022-2148
The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS6.2AI score0.00577EPSS
SaveExploits2References1
CVE-2022-2148: Improper Neutralization of Input During Web Page Generation
The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.7AI score0.00577EPSS
SaveExploits2References2
20