CVE-2023-4022

CVE-2023-4022 is a Stored Cross-Site Scripting (XSS) vulnerability affecting the Herd Effects WordPress plugin prior to version 5.2.3. The vulnerability stems from insufficient sanitization and escaping of plugin settings, allowing high-privilege users (e.g., administrators) to inject malicious scripts. Rated Medium severity (CVSS 4.8), it requires user interaction and high privileges, but can bypass unfiltered_html restrictions, potentially leading to client-side attacks. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.