CVE-2022-4481

The CVE-2022-4481 entry affects the Mesmerize Companion WordPress plugin prior to version 1.6.135. The vulnerability arises because the plugin does not validate and escape certain shortcode attributes before output, enabling Stored XSS. Impact can allow users with as low as Contributor privileges...