CVE-2022-2186

The CVE-2022-2186 entry concerns the WordPress Simple Post Notes plugin prior to 1.7.6. The issue is a stored cross-site scripting (XSS) vulnerability caused by failure to sanitize and escape plugin settings, enabling high-privilege users (e.g., admins) to perform XSS even when unfiltered_html is...