← CVE Intelligence

CVE-2022-1395

Easy FAQ with Expanding Text <= 3.2.8.3.1 - Admin+ Stored Cross-Site Scripting PUBLISHED

Description (CNA)

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

Affected (CNA)

Vendor / productVersions
Unknown / Easy FAQ with Expanding Textaffected 3.2.8.3.1 through 3.2.8.3.1

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.