CVE-2022-0446 | BDVDB-2026-182785 Detail

Simple Banner

Description#

The Simple Banner WordPress plugin before 2.12.0 does not properly sanitize its "Simple Banner Text" Settings allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/3fc7986e-3b38-4e16-9516-2ae00bc7a581

Exploit#

No public exploit known

History#

Version 12022-08-22Record published in the CVE List.
Version 22024-08-02Most recent update recorded in the CVE List.