TI-2022-01989 CVE-2022-2148 · GHSA-w423-m4qw-5m57LinkedIn Company Updates <= 1.5.3 - Admin+ Stored Cross-Site ScriptingPriority LOW 23The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html cap…CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00588 · Published 2022-07-17 · No fix listed CWE-79