mirror of
https://github.com/0xMarcio/cve.git
synced 2026-05-25 20:57:49 +02:00
853 B
853 B
CVE-2022-1435
Description
The WPCargo Track & Trace WordPress plugin before 6.9.5 does not sanitize and escapes some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.