TI-2022-01379 CVE-2022-1506 · GHSA-82vp-x6m8-qwh2WP Born Babies <= 1.0 - Contributor+ Stored Cross-Site ScriptingPriority LOW 25The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacksCVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00604 · Published 2022-06-06 · No fix listed CWE-79