CVE Database /
CVE-2022-4542
CVE · Medium
CVE-2022-4542 — Compact WP Audio Player [compact-wp-audio-player] < 1.9.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2022-4542
|
Compact WP Audio Player [compact-wp-audio-player] < 1.9.8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 1.9.8
|
1.9.8 |
2022-12-27 |
—
|
CVE-2022-4542
The Compact WP Audio Player plugin contained a cross-site scripting vulnerability that could permit an attacker to inject arbitrary scripts into a website, potentially resulting in redirects, malicious advertisements, or other HTML-based attacks that execute when visitors access the site. This flaw was discovered by Lana Codes and has been resolved in version 1.9.8 or later. Users should upgrade to version 1.9.8 as soon as possible to mitigate this security risk.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings