CVE-2022-4470

CVE-2022-4470 affects the WordPress Widgets for Google Reviews plugin. The vulnerability arises because the plugin pre-9.8 does not validate or escape certain shortcode attributes before output, enabling Stored Cross-Site Scripting. Exploitation requires a CONTRIBUTOR-level or higher role on a si...