2 matches found
CVE-2022-4826
The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
5.4CVSS5.9AI score0.00605EPSS
SaveExploits2
Cross site scripting
The Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks...
4.9CVSS5.4AI score0.00605EPSS
SaveExploits2References1Affected Software1
20