← Database

CVE-2022-36796

MEDIUM CVSS: 6.1 Published: 2022-09-01 Modified: 2026-06-17

Description

Cross-Site Request Forgery (CSRF) vulnerability leading to Stored Cross-Site Scripting (XSS) in CallRail, Inc. CallRail Phone Call Tracking plugin <= 0.4.9 at WordPress.

Affected Platforms

Callrail Callrail Phone Call Tracking

Weakness Type

CWE-79, CWE-352

References