Not rated
CVE-2022-1945 The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some…
Description
The Coming Soon & Maintenance Mode by Colorlib WordPress plugin before 1.0.99 does not sanitize and escape some settings, allowing high privilege users such as admin to perform Stored Cross-Site Scripting when unfiltered_html is disallowed (for example in multisite setup)
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Coming Soon & Maintenance Mode by Colorlib 1.0 | earliest → < 1.0.99 | 1.0.99 |