3 matches found
EUVD-2022-25161
Malicious code in bioql PyPI...
4.8CVSS5.2AI score0.00588EPSS
SaveExploits2References1
CVE-2022-1889
The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheadertext setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed...
4.8CVSS5.8AI score0.00588EPSS
SaveExploits2References1
CVE-2022-1889: Improper Neutralization of Input During Web Page Generation
The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheadertext setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed...
4.8CVSS5.7AI score0.00588EPSS
SaveExploits2References2
20