Vulnerability — CVE-2022-4676

CVE-2022-4676

Reference to the description:: https://nvd.nist.gov/vuln/detail/CVE-2022-4676
Description:: The OSM WordPress plugin through 6.01 does not validate and escape some of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.
Last updated date:: 06/05/2023

Type:: exploit
Confidence:: HIGH
Date of publishing:: 06/05/2023
Reference url to background: https://wpscan.com/vulnerability/1df3c17c-990d-4074-b1d5-b26da880d88e