CVE-2022-4654

CVE-2022-4654: Pricing Tables WordPress Plugin – Easy Pricing Tables < 3.2.3 - Contributor+ Stored XSS via Shortcode

Vendor Unknown
Product Pricing Tables WordPress Plugin
Published January 30, 2023
Last update March 28, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Pricing Tables WordPress Plugin WordPress plugin before 3.2.3 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack.

Key dates

02Disclosure timeline

January 30, 2023 CVE published
March 28, 2025 Record updated