Not rated
CVE-2022-2398 The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow…
Description
The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WordPress Comments Fields 4.1 | earliest → < 4.1 | 4.1 |