CVE-2022-45825

The CVE concerns the WordPress WPComplete plugin. Affected software: iThemes WPComplete plugin versions up to 2.9.2 (WordPress ecosystem context shows up to 2.9.4 in some sources). Vulnerability type: Unauth. Reflected Cross-Site Scripting (XSS) in the plugin’s handling of input exposed to site v...