CVE-2022-1112

The CVE-2022-1112 entry concerns the WordPress Autolinks plugin (up to version 1.0.1) with a Stored Cross-Site Scripting flaw caused by missing CSRF protection and lack of sanitization/escaping when updating settings. The vulnerability could allow a logged-in administrator to be targeted via a CS...