CVE-2022-2325

The Invitation Based Registrations WordPress plugin through 2.2.84 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2325

CVE-2022-2325 affects the Invitation Based Registrations WordPress plugin (versions ≤ 2.2.84). The vulnerability arises because the plugin does not sanitize and escape certain settings, enabling Stored Cross-Site Scripting when unfiltered_html is disallowed (e.g., multisite). This can allow high-...