Description
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Hans Matzen's wp-forecast plugin <= 7.5 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Hans Matzen | wp-forecast (WordPress plugin) | <= 7.5 – ≤ 7.5 | — |
Medium · 4.8
CVE-2022-35725
EUVD-2022-38599GHSA-39xf-p2jj-wm7p
WordPress wp-forecast plugin <= 7.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Sep 9, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack