2 matches found
CVE-2022-1228
The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.9AI score0.00588EPSS
SaveExploits1References1
CVE-2022-1228
The Opensea WordPress plugin before 1.0.3 does not sanitize and escape some of its settings, like its "Referer address" field, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.5AI score0.00588EPSS
SaveExploits1References2
20