Vulnerabilities and Security Researches

WP-Paginate, CVE-2021-4222

CVE, Research URL: CVE-2021-4222
Home page URL: Security reports for WP-Paginate
Application: WP-Paginate
Published on: Feb 28, 2022
Research Description: The WP-Paginate WordPress plugin before 2.1.4 does not sanitise and escape its preset settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html is disallowed
Affected versions: max 2.1.4.
Status: vulnerable