Admin Columns Free < 4.3 & Pro < 5.5.1 - Authenticated Stored Cross-Site Scripting (XSS) in Label
Description
The Admin Columns WordPress plugin, Free and Pro versions, rendered input on the posted pages with improper input validation on the value passed into the field `Label` parameter, by taking this as an advantage an authenticated attacker can supply a crafted arbitrary script and execute it.
Affects Plugins
Fixed in version 4.3✓
Fixed in version 5.5.1✓
Classification
Miscellaneous
Original Researcher
Daniel Elkabes of WhiteSource
Verified
No
Timeline
Publicly Published
2021-05-31 (about 7 months ago)
Added
2021-06-07 (about 7 months ago)
Last Updated
2021-08-10 (about 5 months ago)