CVE-2022-2411

The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2411 Auto More Tag <= 4.0.0 - Admin+ Stored Cross-Site Scripting

The Auto More Tag WordPress plugin through 4.0.0 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2022-2411

CVE-2022-2411 affects the Auto More Tag WordPress plugin (versions prior to 4.0.1). The issue arises from insufficient sanitization/escaping of some settings, enabling Stored Cross-Site Scripting by high-privilege users (e.g., admins) when unfiltered_html is disallowed (notably in multisite). Imp...