CVE-2022-1027

CVE-2022-1027 describes a stored Cross-Site Scripting (XSS) vulnerability in the Page Restriction WordPress plugin prior to version 1.2.7. This flaw allows malicious administrators to inject JavaScript code into the plugin's settings, which then executes in the browsers of other administrators. Rated with a CVSS score of 4.8 (Medium), the vulnerability requires high privileges (administrator access) and user interaction, with potential impacts including limited confidentiality and integrity compromise. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.