← CVE Intelligence

CVE-2022-0448

CP Blocks < 1.0.15 - Admin+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The CP Blocks WordPress plugin before 1.0.15 does not sanitise and escape its "License ID" settings, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed.

Affected (CNA)

Vendor / productVersions
Unknown / CP Blocksaffected 1.0.15 before 1.0.15

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.