CVE-2022-36378

Authenticated (author or higher user role) Stored Cross-Site Scripting (XSS) vulnerability in PluginlySpeaking Floating Div plugin <= 3.0 at WordPress.

Score

CVSS 3.1 4.8 Medium

Status

Modified - audit@patchstack.com

Published

2022-07-29

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Floating Div (Floating Div Project)
• Floating Div Wordpress Plugin (Pluginlyspeaking)

References

• https://patchstack.com/database/vulnerability/floating-div/wordpress-floating-div-plugin-3-0-authenticated-stored-cross…
• https://wordpress.org/plugins/floating-div/#developers