Medium · 4.1 CVE-2022-37338 EUVD-2022-39972GHSA-qj68-h3qr-6vgv

WordPress Blossom Recipe Maker plugin <= 1.0.7 - Multiple Authenticated Stored Cross-Site Scripting (XSS) vulnerabilities

Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Multiple Authenticated (contributor+) Stored Cross-Site Scripting (XSS) vulnerabilities in Blossom Recipe Maker plugin <= 1.0.7 at WordPress.

Vendor	Product	Affected	Fixed
Blossomthemes	Blossom Recipe Maker (WordPress plugin)	<= 1.0.7 – ≤ 1.0.7	—