CVE-2022-36383

The vulnerability CVE-2022-36383 affects the WHA Word Search Puzzles WordPress plugin up to version 2.0.1. It enables Multiple Authenticated Stored XSS via insufficient sanitization/escaping, exploitable by users with contributor+ privileges. Affected component: plugin code handling input/output;...