Not rated
CVE-2022-0898 The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't…
Description
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IgniteUp – Coming Soon and Maintenance Mode | 3.4.1 | No fix stated |