CVE-2022-4836

CVE-2022-4836 affects the Breadcrumb WordPress plugin prior to version 1.5.33. The vulnerability arises from not validating/escaping certain shortcode attributes before output, enabling Stored XSS where a low-privilege user (contributor) could compromise high-privilege users (admins). Public sour...