Security Advisory

CVE-2022-4946

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2023-06-05 13:39:00

Last updated 2025-01-08 16:55:29

Assigner WPScan

CVSS score not scored

State PUBLISHED

Description

The Frontend Post WordPress Plugin WordPress plugin through 2.8.4 does not validate an attribute of one of its shortcode, which could allow users with a role as low as contributor to add a malicious shortcode to a page/post, which will redirect users to an arbitrary domain.

← Browse all CVEs View on cve.org ↗