Security Advisory

CVE-2022-1889

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-06-20 10:26:13

Last updated 2024-08-03 00:17:00

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Newsletter WordPress plugin before 7.4.6 does not escape and sanitise the preheader_text setting, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when the unfilteredhtml is disallowed

← Browse all CVEs View on cve.org ↗