TI-2022-04425 CVE-2022-4829 · GHSA-4xcm-ff46-5j4r
Show-Hide / Collapse-Expand < 1.3.0 - Contributor+ Stored XSS via Shortcode
Priority MEDIUM 58
The Show-Hide / Collapse-Expand WordPress plugin before 1.3.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contribut…