Medium · 4.8 CVE-2022-40694 EUVD-2022-43965GHSA-vq7w-xcgj-5h82

WordPress News Announcement Scroll plugin <= 8.8.8 - Auth. Stored Cross-Site Scripting (XSS) vulnerability

Published Nov 17, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in News Announcement Scroll plugin <= 8.8.8 on WordPress.

Vendor	Product	Affected	Fixed
StoreApps	News Announcement Scroll (WordPress plugin)	<= 8.8.8 – ≤ 8.8.8	—