Not rated
CVE-2022-0211 The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high…
Description
The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Shield Security – Scanners, Security Hardening, Brute Force Protection & Firewall 13.0 | earliest → < 13.0.6 | 13.0.6 |