Aller au contenu
Non notée

CVE-2022-0898 The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't…

Description

The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues

Produits et versions touchés

Produit Versions touchées Corrigé en
IgniteUp – Coming Soon and Maintenance Mode 3.4.1 Pas de correctif indiqué
Suivre cette CVE