CVE-2022-4782 | BDVDB-2026-209784 Detail

ClickFunnels

Description#

The ClickFunnels WordPress plugin through 3.1.1 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://wpscan.com/vulnerability/d3a0468a-8405-4b6c-800f-abd5ce5387b5

Exploit#

https://wpscan.com/vulnerability/d3a0468a-8405-4b6c-800f-abd5ce5387b5

History#

Version 12023-08-16Record published in the CVE List.
Version 22024-10-08Most recent update recorded in the CVE List.