TI-2022-03447 CVE-2022-3753 · GHSA-86w6-jjjm-5mx6
Evaluate <= 1.0 - Admin+ Stored Cross-Site Scripting
Priority MEDIUM 55
The Evaluate WordPress plugin through 1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_h…