Not rated
CVE-2022-0958 The Mark Posts WordPress plugin before 2.0.1 does not escape new markers, allowing high privilege users such as admin to…
Description
The Mark Posts WordPress plugin before 2.0.1 does not escape new markers, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Mark Posts 2.0 | earliest → < 2.0.1 | 2.0.1 |