Skip to content
OpenAdvisories
Unscored CVE-2022-1506 EUVD-2022-24806GHSA-82vp-x6m8-qwh2

WP Born Babies <= 1.0 - Contributor+ Stored Cross-Site Scripting

Published Jun 6, 2022 · Updated Aug 3, 2024 · Assigned by WPScan

Description

The WP Born Babies WordPress plugin through 1.0 does not sanitise and escape some of its fields, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

Affected products

VendorProductAffectedFixed
— WP BORN BABIES PLUGIN 1.0 – ≤ 1.0 —

References