CVE-2022-0210

CVE-2022-0210 affects the WordPress plugin “Random Banner.” The vulnerability is a Stored Cross-Site Scripting (XSS) due to insufficient escaping in the category parameter within ~/include/models/model.php. It can be exploited by an attacker with administrative access to inject arbitrary scripts....