TI-2022-04075 CVE-2022-4458 · GHSA-hqv8-6j38-837g
Amr Shortcode Any Widget <= 4.0 - Contributor+ Stored XSS
Priority MEDIUM 58
The amr shortcode any widget WordPress plugin through 4.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor t…