CVE-2022-4654

The CVE-2022-4654 entry concerns the Pricing Tables WordPress Plugin prior to version 3.2.3, where one shortcode attribute is not validated/escaped. This allows Stored XSS from users with a role as low as contributor. The vulnerability’s impact is reflected in published PoCs and advisories, and a...