CVE-2022-4674

The Ibtana WordPress plugin before 1.1.8.8 does not validate and escape one of its shortcode attributes, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attack

Score

CVSS 3.1 5.4 Medium

Status

Modified - contact@wpscan.com

Published

2023-02-06

Last modified

2025-03-26

Affected products

• Ibtana (Unknown)
• Ibtana (Vowelweb)

References

• https://wpscan.com/vulnerability/eda64678-81ae-4be3-941e-a1e26e54029b