WordPress Plugin Vulnerabilities
Admin Columns Free < 4.3 & Pro < 5.5.1 - Authenticated Stored Cross-Site Scripting (XSS) in Label
Description
The Admin Columns WordPress plugin, Free and Pro versions, rendered input on the posted pages with improper input validation on the value passed into the field `Label` parameter, by taking this as an advantage an authenticated attacker can supply a crafted arbitrary script and execute it.
Affects Plugins
Fixed in version 4.3
Fixed in version 5.5.1
References
Classification
Miscellaneous
Original Researcher
Daniel Elkabes of WhiteSource
Verified
No
Timeline
Publicly Published
2021-05-31 (about 1 years ago)
Added
2021-06-07 (about 1 years ago)
Last Updated
2021-08-10 (about 10 months ago)