CyberRota Analysis
AI analysis pending.
CVE
CVE-2022-4792
Severity
MEDIUM
CVSS
5.4
EPSS
0.44%
WordPress
Original NVD Description
The News & Blog Designer Pack WordPress plugin before 3.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.