CVE-2022-4171

The CVE-2022-4171 entry concerns the demon image annotation plugin for WordPress, affected through versions up to and including 5.0. The root cause is improper input validation of the number of characters in an annotation, ignoring an existing setting intended to limit input length. This allows u...