2 matches found
CVE-2022-0840
The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the imagefile field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfilteredhtml capability is disallowed...
4.8CVSS5.9AI score0.00598EPSS
SaveExploits2References1
CVE-2022-0840
The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the imagefile field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfilteredhtml capability is disallowed...
4.8CVSS5.6AI score0.00598EPSS
SaveExploits2References2
20