CVE-2022-4674

CVE-2022-4674: Ibtana – WordPress Website Builder < 1.1.8.8 - Contributor+ Stored XSS via Shortcode

Vendor Unknown
Product Ibtana
Published February 6, 2023
Last update March 26, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack

Key dates

02Disclosure timeline

February 6, 2023 CVE published
March 26, 2025 Record updated