3 matches found
CVE-2022-4491
The WP-Table Reloaded WordPress plugin through 1.9.4 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high...
5.4CVSS5.8AI score0.00471EPSS
SaveExploits2References1
CVE-2022-4491
CVE-2022-4491 – WP-Table Reloaded
5.4CVSS5.4AI score0.00471EPSS
SaveExploits2References1Affected Software1
CVE-2022-4491 WP Table Reloaded <= 1.9.4 - Contributor+ Stored XSS
The WP-Table Reloaded WordPress plugin through 1.9.4 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks, which could be used against high...
5.6AI score0.00471EPSS
SaveExploits2References1
20