← Database

CVE-2022-0898

MEDIUM CVSS: 5.4 Published: 2022-05-09 Modified: 2026-06-17

Description

The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues

Affected Platforms

Getigniteup Igniteup

Weakness Type

CWE-79

References