2 matches found
CVE-2022-0446
The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS0.00538EPSS
SaveExploits1References1
CVE-2022-0446: Improper Neutralization of Input During Web Page Generation
The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.6AI score0.00538EPSS
SaveExploits1References2
20