TI-2022-04019 CVE-2022-4391 · GHSA-vcgj-3gwq-4x48
Vision Interactive For WordPress <= 1.5.3 - Contributor+ Stored XSS
Priority MEDIUM 58
The Vision Interactive For WordPress plugin through 1.5.3 does not sanitise and escape some of its settings, which could allow users such as contributor+ to perform Stored Cross-Site Scripting attacks even when the unfil…