CVE-2021-4222CWE-79

WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting

published February 28, 2022

CVSS
—
EPSS
1%
Percentile
56.5
In the wild
Unconfirmed
What it is

The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00810 · 56.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-02-28T09:06Z
EPSS history
Timeline
  • 28 FEB 09:06Z
    WP Paginate < 2.1.4 - Admin+ Stored Cross-Site Scripting
    cvelistv5