CVE-2022-36365

creationtimestamp| type| source ---|---|--- 2022-09-22 00:46:15+00:00| seen| https://t.me/cibsecurity/50241...

CVE-2022-36365

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...

CVE-2022-36365 WordPress WHA Crossword plugin <= 1.1.10 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Multiple Authenticated contributor+ Stored Cross-Site Scripting XSS vulnerabilities in WHA Crossword plugin = 1.1.10 at WordPress...

CVE-2022-36365

CVE-2022-36365 affects the WordPress plugin WHA Crossword up to version 1.1.10 . The issue is described as multiple authenticated stored XSS vulnerabilities (contributor+ level) arising from insufficient input sanitization/escaping, enabling an attacker with at least contributor privileges to inj...