Unrated severityNVD Advisory· Published May 16, 2022· Updated Aug 2, 2024
BulletProof Security < 6.1 - Admin+ Stored Cross-Site Scripting
CVE-2022-1265
Description
The BulletProof Security WordPress plugin before 6.1 does not sanitize and escape some of its CAPTCHA settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2(expand)+ 1 more
- (no CPE)
- (no CPE)range: <6.1
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/9b66819d-8479-4c0b-b206-7f7ff769f758mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.