TI-2022-01178 CVE-2022-1294 · GHSA-rvp6-wxw5-3f46IMDB info box <= 2.0 - Admin+ Stored Cross-Site ScriptingPriority LOW 23The IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability i…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00598 · Published 2022-05-30 · No fix listed CWE-79
