CVE-2022-4570

CVE-2022-4570 affects the WordPress Top 10 plugin prior to version 3.2.3. It allows Stored XSS by not validating/escaping certain Block attributes, enabling attackers with Contributor权限 to target admins. Remediation: update to version 3.2.3 or later; no additional exploitation details documented ...