Unrated

Text Hover < 4.2 - Admin+ Stored Cross-Site Scripting

CVE-2022-0737 First seen on SecPulse Apr 19, 2022

Original description The description as published by the source.

The Text Hover WordPress plugin before 4.2 does not sanitize and escape the text to hover, which could allow high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
advisory nvd.nist.gov
web wpscan.com

Key facts

Severity: Unrated
Published: Apr 19, 2022
First seen on SecPulse: Apr 19, 2022
CWE: CWE-79

NVD OSV

Detection sources

OSV.dev (Open Source Vulnerabilities)Oct 20, 19:55