PT-2022-14247

Name of the Vulnerable Software and Affected Versions Malware Scanner WordPress plugin versions prior to 4.5.2 Description The issue allows malicious users with administrator privileges to store malicious Javascript code, leading to Cross-Site Scripting attacks when unfiltered html is disallowed,...

CVE-2022-1995: Improper Neutralization of Input During Web Page Generation

The Malware Scanner WordPress plugin before 4.5.2 does not sanitise and escape some of its settings, leading to malicious users with administrator privileges to store malicious Javascript code leading to Cross-Site Scripting attacks when unfilteredhtml is disallowed for example in multisite setup...