CVE-2022-4671

The CVE-2022-4671 entry affects the PixCodes WordPress plugin prior to version 2.3.7. The underlying issue is failure to validate and escape certain shortcode attributes before output, enabling a Stored XSS risk where a low-privilege user (contributor) could target higher-privilege users (admins)...