CVE-2022-2148

The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2148

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:48+00:00| seen| https://t.me/cibsecurity/46390...

CVE-2022-2148

The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2148

CVE-2022-2148 affects the WordPress plugin LinkedIn Company Updates (versions up to 1.5.3). The vulnerability is a stored XSS caused by insufficient sanitisation/escaping of plugin settings, enabling high-privilege users (e.g., admin) to inject scripts even when unfiltered_html is disallowed. Exp...