CVE-2022-0418

CVE-2022-0418 relates to the WordPress Event List plugin (versions prior to 0.8.8). The flaw is a stored Cross-Site Scripting (XSS) vulnerability caused by failing to sanitize and escape certain settings, allowing high-privilege users (e.g., admins) to inject JavaScript that can affect other admi...