PT-2022-13039

Name of the Vulnerable Software and Affected Versions Shield Security WordPress plugin versions prior to 13.0.6 Description The issue allows high privilege users to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of admin notes, even when the unfiltered html is...

CVE-2022-0211: Improper Neutralization of Input During Web Page Generation

The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...