The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfiltered_html is disallowed
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: WPScan

Published: 2022-07-11T12:57:09

Updated: 2024-08-03T00:24:44.187Z

Reserved: 2022-06-10T00:00:00

Link: CVE-2022-2050

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2022-07-11T13:15:09.167

Modified: 2022-07-15T20:55:24.967

Link: CVE-2022-2050

cve-icon Redhat

No data.