CVE-2022-0958

CVE-2022-0958: Mark Posts < 2.0.1 - Admin+ Stored Cross-Site Scripting

Vendor Unknown
Product Mark Posts
Weakness CWE-79 · XSS
Published April 4, 2022
Last update August 2, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Mark Posts WordPress plugin before 2.0.1 does not escape new markers, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed

Key dates

02Disclosure timeline

April 4, 2022 CVE published
August 2, 2024 Record updated