Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-0898

IgniteUp <= 3.4.1 - Admin+ Stored Cross-Site Scripting

Description

The IgniteUp WordPress plugin through 3.4.1 does not sanitise and escape some fields when high privilege users don't have the unfiltered_html capability, which could lead to Stored Cross-Site Scripting issues

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown IgniteUp – Coming Soon and Maintenance Mode

  • 3.4.1 to ≤ 3.4.1affected

References