CVE-2022-4480

CVE-2022-4480 concerns the WordPress plugin Click to Chat prior to version 3.18.1. The issue stems from insufficient validation/escaping of shortcode attributes, allowing stored XSS when a low-privilege user (Contributor) interacts with the page, potentially impacting higher-privilege users (admi...