2 matches found
CVE-2022-4826
The CVE concerns the WordPress plugin Simple Tooltips prior to v2.1.4. It does not validate or escape certain shortcode attributes before output, enabling Stored XSS for users with the contributor role or higher when the shortcode is embedded on a page. The vulnerability root cause is inadequate ...
CVE-2023-25958
CVE-2023-25958 is an admin+ authenticated, stored cross-site scripting (XSS) vulnerability in the WordPress plugin Simple Tooltips