CVE-2022-0700

CVE-2022-0700 affects the WordPress Simple Tracking plugin prior to version 1.7. The vulnerability is a stored Cross-Site Scripting (XSS) caused by the plugin not sanitising and escaping settings, which could let high-privilege users (e.g., admins) execute scripts even when unfiltered_html is dis...