The Mortgage Calculators WP WordPress plugin before 1.56 does not implement any sanitisation on the color setting of the background of a calculator, which could allow high privilege users to perform Stored Cross-Site Scr…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.05063·Published 2022-02-14·Fixed in 1.56CWE-79