medium5.4
CVE-2022-0898
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which…
Impact
The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getigniteup | Igniteup | through 3.4.1 |