CVE-2022-4325

The Post Status Notifier Lite WordPress plugin before 1.10.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high privilege users such as admin.

Score

CVSS 3.1 6.1 Medium

Status

Modified - contact@wpscan.com

Published

2023-01-09

Last modified

2025-04-09

Affected products

• Post Status Notifier Lite (Ifeelweb)
• Post Status Notifier Lite (Unknown)

References

• https://wpscan.com/vulnerability/5b983c48-6b05-47cf-85cb-28bbeec17395