2 matches found
Cross site scripting
The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.3CVSS4.7AI score0.0047EPSS
SaveExploits2References1Affected Software1
CVE-2022-3601 Image Hover Effects Css3 <= 4.5 - Admin+ Stored XSS
The Image Hover Effects Css3 WordPress plugin through 4.5 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
4.7AI score0.0047EPSS
SaveExploits2References1
20