Medium severity4.8NVD Advisory· Published Aug 1, 2022· Updated Jun 17, 2026
CVE-2022-1324
CVE-2022-1324
Description
The Event Timeline WordPress plugin through 1.1.5 does not sanitize and escape Timeline Text, which could allow high-privileged users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Event Timeline/Event Timeline WordPress plugindescription
- Range: <=1.1.5
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/2ce2a387-acc8-482a-9452-a4d9acb187fdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.