VYPR

Evaluate

by WordPress

CVEs (1)

  • CVE-2022-3753MedNov 21, 2022
    risk 0.31cvss 4.8epss 0.01

    The Evaluate WordPress plugin through 1.0 does not sanitize and escapes some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example, in multisite…