The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallo…
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.0081·Published 2022-02-28·Fixed in 2.1.4CWE-79
The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfiltered_html is disallowed
CVSS 3.1MEDIUM 4.8·Network·High privileges·User interaction·EPSS 0.00588·Published 2022-07-11·Fixed in 2.1.9CWE-79