5.7
Medium
CVE-2022-36859 Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to…
Description
Improper input validation vulnerability in SmartTagPlugin prior to version 1.2.21-6 allows privileged attackers to trigger a XSS on a victim's devices.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| SmartTagPlugin 1.2 | earliest → < 1.2.21-6 | 1.2.21-6 |