5.4
Medium
CVE-2022-29442 Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For…
Description
Authenticated (subscriber or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in Messages For WordPress <= 2.1.10 at WordPress.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Private Messages For WordPress (WordPress plugin) 2.1 | earliest → 2.1.10 | No fix stated |