CVE-2022-3824

Summary: CVE-2022-3824 affects the WP Admin UI Customize WordPress plugin, versions prior to 1.5.13. The root cause is inadequate sanitisation/escaping of certain settings, enabling Stored XSS by high-privilege users (e.g., admins) even when unfiltered_html is disallowed (such as in multisite). I...