4.8
Medium
CVE-2022-40672 Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress
Description
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in CPO Shortcodes plugin <= 1.5.0 at WordPress.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| CPO Shortcodes (WordPress plugin) 1.5 | earliest → 1.5.0 | No fix stated |