CVE-2022-2050 | BDVDB-2026-179697 Detail

WP-Paginate

Description#

The WP-Paginate WordPress plugin before 2.1.9 does not escape one of its settings, which could allow high privilege users to perform Stored Cross-Site Scripting attacks when unfiltered_html is disallowed

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/016453e3-803b-4a67-8ea7-2d228c2998d4

Exploit#

No public exploit known

History#

Version 12022-07-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.