CVE-2022-41640

Auth. subscriber+ Stored Cross-Site Scripting XSS vulnerability in Rymera Web Co Wholesale Suite plugin = 2.1.5 versions...

CVE-2022-41640

CVE-2022-41640 : Authenticated stored Cross-Site Scripting in the WordPress plugin Wholesale Suite (Rymera Web Co) , affecting version up to 2.1.5 . The vulnerability exists in the plugin’s handling of input for subscribers, enabling a stored XSS payload when executed in an authenticated user con...