CVE-2022-4760

The OneClick Chat to Order WordPress plugin is affected prior to version 1.0.4.2. The underlying issue is failure to validate and escape certain shortcode attributes before displaying them, enabling Stored XSS by low-privilege users (contributor) that could impact high-privilege admins. Underlyin...