1 matches found
CVE-2022-0211: Improper Neutralization of Input During Web Page Generation
The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml is disallowed...
4.8CVSS5.7AI score0.00598EPSS
SaveExploits2References2
20