Unrated severityNVD Advisory· Published Apr 11, 2022· Updated Aug 2, 2024
Easy Social Icons < 3.2.1 - Admin+ Stored Cross-Site Scripting in add icon
CVE-2022-0840
Description
The Easy Social Icons WordPress plugin before 3.2.1 does not properly escape the image_file field when adding a new social icon, allowing high privileged users to inject arbitrary javascript even when the unfiltered_html capability is disallowed.
Affected products
1- Range: 3.2.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- wpscan.com/vulnerability/9da884a9-b4dd-4de0-9afa-722f772cf2dfmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.