CVE-2022-3836

The CVE-2022-3836 entry concerns the Seed Social WordPress plugin (before 2.0.4). The issue is a stored XSS vulnerability caused by insufficient sanitization/escaping of certain settings, enabling high-privilege users (e.g., admins) to inject script even when unfiltered_html is disallowed (includ...