CVE-2022-4110

The CVE-2022-4110 entry concerns the Eventify WordPress plugin (versions through 2.1). The vulnerability stems from insufficient sanitisation/escaping of certain settings, allowing stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed, including in multisite se...