Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Chameleon plugin <= 1.4.3 on WordPress.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fahad Mahmood | Chameleon (WordPress plugin) | <= 1.4.3 – ≤ 1.4.3 | — |
Medium · 4.8
CVE-2022-44736
EUVD-2022-47668GHSA-7cc6-3w3g-h5c7
WordPress Chameleon plugin <= 1.4.3 - Auth. Stored Cross-Site Scripting (XSS) vulnerability
Published Nov 17, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack