Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in WaspThemes Visual CSS Style Editor plugin <= 7.5.8 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WaspThemes | Visual CSS Style Editor | ≤ 7.5.8 | — |
Medium · 4.0
CVE-2022-33961
EUVD-2022-36997GHSA-hg9c-6xjx-4gh8
WordPress YellowPencil Visual CSS Style Editor Plugin <= 7.5.8 is vulnerable to Cross Site Scripting (XSS)
Published May 10, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack