Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-1027

Page Restriction WordPress < 1.2.7 - Admin+ Stored Cross-Site Scripting

Description

The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrator privileges to the settings page to inject Javascript code to its settings leading to stored Cross-Site Scripting that will only affect administrator users.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown Page Restriction WordPress (WP) – Protect WP Pages/Post

  • 1.2.7 to < 1.2.7affected

References