VULNERABILITY INTELLIGENCE

CVE-2022-1093

CVSS score4.8 MEDIUM

EPSS probability0.61%

CISA KEVNot currently listed

Published2022-05-23

Last modified2026-06-17

Description

The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it to the page, allowing a high privilege user such as an administrator to inject arbitrary javascript into the page even when unfiltered html is disallowed.