CVE-2022-3139

The CVE-2022-3139 entry describes a Stored Cross-Site Scripting (XSS) flaw in the We’re Open! WordPress plugin prior to version 1.42. The issue arises because certain plugin settings are not properly sanitized/escaped, enabling high-privilege users (e.g., admins) to trigger XSS, even when unfilte...