CVE-2022-1763

CVE-2022-1763 affects the WordPress Static Page eXtended plugin up to version 2.1. The issue stems from missing CSRF checks, allowing an attacker to arbitrarily update plugin settings (including required user levels). This can lead to Stored XSS due to insufficient escaping in certain settings. P...