VYPR

Linkedin Company Updates

by Linkedin Company Updates Project

CVEs (1)

  • CVE-2022-2148MedJul 17, 2022
    risk 0.31cvss 4.8epss 0.01

    The LinkedIn Company Updates WordPress plugin through 1.5.3 does not sanitise and escape its settings, allowing high privilege users such as admin to perform cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.