NA

CVE-2022-4792

Published: 30/01/2023 Updated: 07/11/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

The News & Blog Designer Pack WordPress plugin prior to 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

infornweb news \\& blog designer pack