CVE-2022-4836

The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege...

CVE-2022-4836

CVE-2022-4836 affects the Breadcrumb WordPress plugin prior to version 1.5.33. The vulnerability arises from not validating/escaping certain shortcode attributes before output, enabling Stored XSS where a low-privilege user (contributor) could compromise high-privilege users (admins). Public sour...

CVE-2022-4836 Breadcrumb < 1.5.33 - Contributor+ Stored XSS via Shortcode

The Breadcrumb WordPress plugin before 1.5.33 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege...

PT-2022-14968

Name of the Vulnerable Software and Affected Versions The Very Simple Breadcrumb WordPress plugin through 1.0 Description The issue allows high privilege users, such as admins, to perform Cross-Site Scripting attacks due to the lack of sanitization and escaping of its settings. This is possible...