Description
Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in PCA Predict plugin <= 1.0.3 at WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PCA Predict | PCA Predict (WordPress plugin) | <= 1.0.3 – ≤ 1.0.3 | — |
Medium · 4.8
CVE-2022-40195
EUVD-2022-43496GHSA-vhxm-j92c-jf79
WordPress PCA Predict plugin <= 1.0.3 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Published Sep 23, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack