Vulnerability Details CVE-2022-3933
The Essential Real Estate WordPress plugin before 3.9.6 does not sanitize and escapes some parameters, which could allow users with a role as low as Admin to perform Cross-Site Scripting attacks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.248
EPSS Ranking 95.8%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2022-3933
-
cpe:2.3:a:g5theme:essential_real_estate:*