CVE-2022-29442

CVE-2022-29442 : Affected product is WordPress Private Messages plugin for WordPress, version 2.1.10 and earlier. The vulnerability is an authenticated Stored Cross-Site Scripting (XSS) flaw in Messages For WordPress, caused by insufficient sanitization/escaping of input, allowing an attacker wit...