The WP Admin UI Customize WordPress plugin before 1.5.13 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).
Metrics
Affected Vendors & Products
References
History
No history.

Status: PUBLISHED
Assigner: WPScan
Published: 2022-11-28T13:47:17.819Z
Updated: 2024-08-03T01:20:58.448Z
Reserved: 2022-11-02T08:56:49.085Z
Link: CVE-2022-3824

No data.

Status : Modified
Published: 2022-11-28T14:15:14.970
Modified: 2024-11-21T07:20:18.610
Link: CVE-2022-3824

No data.