Vulnerabilities > GD Mylist Project > GD Mylist

DATE CVE VULNERABILITY TITLE RISK
2022-03-14 CVE-2022-0703 Cross-site Scripting vulnerability in Gd-Mylist Project Gd-Mylist
The GD Mylist WordPress plugin through 1.1.1 does not sanitise and escape some of its settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
3.5