CVE-2022-1435

CVE-2022-1435

The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Source: CVE-2022-1435

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다