CVE-2022-0876

The CVE-2022-0876 issue affects the WordPress plugin “Social comments by WpDevArt” prior to version 2.5.0. The root cause is failure to sanitize and escape settings, enabling stored Cross-Site Scripting by high-privilege users (e.g., admins) even when unfiltered_html is disallowed. Impact describ...