CVE-2022-3194 — Dokan < 3.6.4 - Vendor Stored Cross-Site Scripting
The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like…
Published: 2024-01-16 · CVSS: 5.4 · CVSS 3.1
The Dokan WordPress plugin before 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7