CVE-2022-36859

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices...

CVE-2022-36859

CVE-2022-36859: An improper input validation vulnerability in SmartTagPlugin prior to 1.2.21-6 allows a privileged attacker to trigger a cross-site scripting (XSS) on a victim’s device. Affected: SmartTagPlugin; root cause is insufficient input validation. Impact (per sources): CVSS v3.1 base sco...

CVE-2022-36859

Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices...