CVE-2022-2340

CVE-2022-2340 — Affected: W-DALIL WordPress plugin (≤ 2.0). Description: non-sanitized/escaped fields allow Stored XSS when unfiltered_html is disallowed (e.g., multisite). Impact: potential for script execution by high-privilege authenticated users (admin). CVSS 3.1 base score 4.8 (Medium) with ...