Vulners
Lucene search
3 matches found
CVE-2022-1090
The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
4.8CVSS5.5AI score0.00588EPSS
Exploits2References2
CVE-2022-1090
CVE-2022-1090 affects the WordPress plugin Good & Bad Comments (versions
4.8CVSS4.7AI score0.00588EPSS
Exploits2References1Affected Software1
CVE-2022-1090 Good & Bad Comments <= 1.0.0 - Admin+ Stored Cross-Site Scripting
The Good & Bad Comments WordPress plugin through 1.0.0 does not sanitise and escape its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...
5AI score0.00588EPSS
Exploits2References1
20