NA

CVE-2022-4782

Published: 16/08/2023 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

The ClickFunnels WordPress plugin up to and including 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

clickfunnels clickfunnels