CVE-2022-4658

CVE-2022-4658 affects the RSSImport WordPress plugin (versions up to 4.6.1). The vulnerability is due to failure to validate/escape one shortcode attribute, enabling Stored XSS for users with a role as low as contributor. Impact is stored XSS within sites using the vulnerable plugin; no exploitab...