Non notée
CVE-2022-0211 The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high…
Description
The Shield Security WordPress plugin before 13.0.6 does not sanitise and escape admin notes, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Shield Security – Scanners, Security Hardening, Brute Force Protection & Firewall 13.0 | premières → < 13.0.6 | 13.0.6 |