2 matches found
CVE-2022-2100
The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.8AI score0.00588EPSS
SaveExploits2References1
CVE-2022-2100: Improper Neutralization of Input During Web Page Generation
The Page Generator WordPress plugin before 1.6.5 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.7AI score0.00588EPSS
SaveExploits2References2
20