← Back

Kunze Law

kunze_law

Vendor: Kunze Medien • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2022-0674
1Kunze Medien
1Kunze Law
Jun 17, 2026
Mar 14, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error "From" Address' settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capa...Show more
The Kunze Law WordPress plugin before 2.1 does not escape its 'E-Mail Error "From" Address' settings, allowing high privilege users such as admin to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowedShow less