CVE-2022-3836

CVE-2022-3836 describes a Stored Cross-Site Scripting (XSS) vulnerability in the Seed Social WordPress plugin prior to version 2.0.4. This flaw allows high-privilege users, such as administrators, to inject malicious scripts due to insufficient sanitization of plugin settings, even in environments where unfiltered_html is restricted. With a CVSS score of 4.8 (Medium), an attacker could exploit this by tricking an administrator into executing a crafted payload, potentially leading to limited impact on confidentiality and integrity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.