TI-2022-01514 CVE-2022-1644 · GHSA-3797-6492-j43gCall&Book Mobile Bar <= 1.2.2 - Admin+ Stored Cross Site ScriptingPriority LOW 23The Call&Book Mobile Bar WordPress plugin through 1.2.2 does not sanitize and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00598 · Published 2022-05-30 · No fix listed CWE-79