CVE-2022-4765

The CVE-2022-4765 issue affects the Portfolio for Elementor WordPress plugin prior to version 2.3.1. It arises from insufficient validation and escaping of certain shortcode attributes, enabling stored XSS where users with as low as Contributor can target higher-privilege users (e.g., admins). A ...