CVE-2022-0737
18.04.2022, 18:15
The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.
| Vendor | Product | Version |
|---|---|---|
| text_hover_project | text_hover | 𝑥 < 4.2 |
𝑥
= Vulnerable software versions