CVE-2022-4541

CVE-2022-4541 : The WordPress Visitors (nm-visitors) plugin for WordPress is vulnerable to Stored Cross-Site Scripting via a spoofed HTTP header in versions ≤ 1.0. It is exploitable by unauthenticated attackers who can inject scripts that run when a user visits the nm_visitors page. Root cause is...