CVE-2022-4478

The Font Awesome WordPress plugin before version 4.3.2 contains a cross-site scripting vulnerability that could enable an attacker to inject and execute malicious scripts on affected websites. A malicious actor could leverage this flaw to inject harmful code such as redirects, advertisements, or other HTML payloads that would execute in the browsers of site visitors. The vulnerability was discovered by Lana Codes and has been remedied in version 4.3.2 and later.

Based on public CVE data (MITRE/NVD).