CVE-2022-4295

The CVE-2022-4295 affects the Show All Comments WordPress plugin (pre-7.0.1). The issue is a Reflected XSS caused by not sanitising/escaping a parameter before it is echoed in the page, potentially affecting logged-in high-privilege users such as admins. The vulnerability is exploitable via craft...