CVE-2022-2398
08.08.2022, 14:15
The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
| Vendor | Product | Version |
|---|---|---|
| najeebmedia | wordpress_comments_fields | 𝑥 < 4.1 |
𝑥
= Vulnerable software versions