CVE-2022-4478 Font Awesome < 4.3.2 - Contributor+ Stored XSS

The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins...

CVE-2022-4478 Font Awesome < 4.3.2 - Contributor+ Stored XSS

The Font Awesome WordPress plugin before 4.3.2 does not validate and escapes some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as a contributor to perform Stored Cross-Site Scripting attacks against logged-in admins...

CVE-2022-4478

The CVE refers to the Font Awesome WordPress plugin prior to version 4.3.2, where shortcode attributes were not properly validated or escaped before output, enabling Stored XSS by users with as low as a contributor to affect logged-in admins. Affected component is the plugin’s shortcode handling;...