CVE-2022-37335

CVE-2022-37335 affects WHA’s Word Search Puzzles WordPress plugin (versions ≤ 2.0.1). The vulnerability is an authenticated stored cross-site scripting (XSS) issue due to insufficient sanitization/escaping of input in the plugin, enabling an author+ to inject scripts that could affect other users...