CVE-2022-36356: Culture Object Project Culture Object

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Liam Gladdy / Thirty8 Digital Culture Object plugin <= 4.0.1 at WordPress.

Affected products

• Culture Object Project Culture Object: up to and including 4.0.1

Published 2022-09-09. Last modified 2026-06-17.