TI-2022-02785 CVE-2022-3021 · GHSA-gchc-j474-g333Slickr Flickr <= 2.8.1 - Admin+ Stored Cross-Site ScriptingPriority LOW 23The Slickr Flickr WordPress plugin through 2.8.1 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00622 · Published 2022-09-19 · No fix listed CWE-79