Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2022-3408

WP Word Count <= 3.2.3 - Admin+ Stored Cross-Site Scripting

Description

The WP Word Count WordPress plugin through 3.2.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unknown WP Word Count

  • 3.2.3 to ≤ 3.2.3affected

References