TI-2022-01774 CVE-2022-1914 · GHSA-rj9h-5xjq-7hqqClean-Contact <= 1.6 - Arbitrary Settings Update to Stored XSS via CSRFPriority LOW 20The Clean-Contact WordPress plugin through 1.6 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack and lead to Stored XSS due…CVSS 3.1MEDIUM 4.3· Network · No auth · User interaction · EPSS 0.00429 · Published 2022-06-27 · No fix listed CWE-352
