TI-2022-02507 CVE-2022-2709 · GHSA-qq28-5ghx-778pFloat to Top Button <= 2.3.6 - Admin+ Stored Cross-Site ScriptingPriority LOW 23The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_ht…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00622 · Published 2022-09-19 · No fix listed CWE-79