Medium · 5.4 CVE-2022-36355 EUVD-2022-39071GHSA-q4c6-p8h4-2xp3

WordPress Easy Org Chart plugin <= 3.1 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Published Sep 1, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Easy Org Chart plugin <= 3.1 at WordPress.

Vendor	Product	Affected	Fixed
PluginlySpeaking	Easy Org Chart (WordPress plugin)	<= 3.1 – ≤ 3.1	—