Description
Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WHA WHA Puzzle plugin <= 1.0.9 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WHA | WHA Puzzle | ≤ 1.0.9 | — |
Medium · 5.3
CVE-2022-45839
EUVD-2022-48693GHSA-hm6w-2fjv-w79j
WordPress WHA Puzzle Plugin <= 1.0.9 is vulnerable to Cross Site Scripting (XSS)
Published Apr 18, 2023 · Updated Apr 28, 2026 · Assigned by Patchstack