CVE-2022-2709

CVE-2022-2709 affects the Float to Top Button WordPress plugin (versions ≤ 2.3.6). The vulnerability arises because the plugin does not escape certain settings, enabling stored XSS by high-privilege users (e.g., admins), including in multisite setups. Mitigation provided in the connected docs inc...