CVE-2022-1228

The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-1228

The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

PT-2022-13729

Name of the Vulnerable Software and Affected Versions Opensea WordPress plugin versions prior to 1.0.3 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of certain settings, such as the Referer address field. Thi...

CVE-2022-1228: Improper Neutralization of Input During Web Page Generation

The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...