CVE-2022-2384

The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2384

The Digital Publications by Supsystic WordPress plugin before 1.7.4 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed...

CVE-2022-2384

The CVE concerns the WordPress plugin Digital Publications by Supsystic (pre-1.7.4). Affected component: plugin settings sanitization/escaping, enabling stored cross-site scripting when a high-privilege user (e.g., admin) can access the Settings UI. Root cause: lack of sanitization/escaping in pl...