Description
Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA Crossword plugin <= 1.1.10 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WHA | WHA Crossword (WordPress plugin) | <= 1.1.10 – ≤ 1.1.10 | — |
Medium · 5.4
CVE-2022-37330
EUVD-2022-39965GHSA-ph7r-3p2x-7pq8
WordPress WHA Crossword plugin <= 1.1.10 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack