CVE-2022-2398: Najeebmedia WordPress Comments Fields

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

The WordPress Comments Fields WordPress plugin before 4.1 does not escape Field Error Message, which could allow high-privileged users to perform Cross-Site Scripting attacks even when unfiltered_html is disallowed

Affected products

• Najeebmedia WordPress Comments Fields: before 4.1 (fixed in 4.1)

Published 2022-08-08. Last modified 2026-06-17.