← Database

CVE-2022-1395

MEDIUM CVSS: 4.8 Published: 2022-05-30 Modified: 2026-06-17

Description

The Easy FAQ with Expanding Text WordPress plugin through 3.2.8.3.1 does not sanitise and escape its settings, allowing high privilege users to perform Cross-Site Scripting attacks when unfiltered_html is disallowed

Affected Platforms

Easy Faq With Expanding Text Project Easy Faq With Expanding Text

Weakness Type

CWE-79

References