Non notée
CVE-2022-2398 The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow…
Description
The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WordPress Comments Fields 4.1 | premières → < 4.1 | 4.1 |