Skip to content
Sign in
6.5 Medium

CVE-2022-45818 Auth

Description

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Hero Banner Ultimate plugin <= 1.3.4 versions.

Affected products and versions

Product Affected versions Fixed in
Hero Banner Ultimate 1.3 earliest → 1.3.4 No fix stated

Other CVEs of Hero Banner Ultimate

The 2 CVEs of Hero Banner Ultimate →
CVE-2025-22305 Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in… 6.5 Medium
Track this CVE