VULNERABILITY INTELLIGENCE
CVE-2022-0209
CVSS score4.8 MEDIUM
EPSS probability0.60%
CISA KEVNot currently listed
Published2022-06-13
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Description
The Mitsol Social Post Feed WordPress plugin before 1.11 does not escape some of its settings before outputting them back in attributes, which could allow high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Weakness classification
- security@wordfence.com: CWE-79