CVE-2022-45818

Auth. (contributor+) Stored Cross-Site Scripting (XSS) vulnerability in WP OnlineSupport, Essential Plugin Hero Banner Ultimate plugin <= 1.3.4 versions.

Score

CVSS 3.1 6.5 Medium

Status

Modified - audit@patchstack.com

Published

2023-05-04

Last modified

2026-04-28

Weaknesses

CWE-79

Affected products

• Hero Banner Ultimate (Essentialplugin)
• Hero Banner Ultimate (Wp Onlinesupport Essential Plugin)

References

• https://patchstack.com/database/vulnerability/hero-banner-ultimate/wordpress-hero-banner-ultimate-plugin-1-3-4-auth-sto…