WordPress Plugin Vulnerabilities

Answer My Question 1.3 - Cross-Site Scripting (XSS)

Description

The answer-my-question WordPress plugin was affected by a Cross-Site Scripting (XSS) security vulnerability.

Proof of Concept

Affects Plugins

Plugin icon
answer-my-question
No known fix

References

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Submitter
Leon Teale
Submitter twitter
leonteale
Verified
No
WPVDB ID
c1769d40-8a1a-4e60-8336-d14d287fdbe0

Timeline

Publicly Published
2017-04-24 (about 9 years ago)
Added
2017-05-02 (about 9 years ago)
Last Updated
2019-11-01 (about 6 years ago)

Other

Published
Title
Published
2025-03-18
Title
Stencies <= 0.58 - Reflected Cross-Site Scripting
Published
2025-04-14
Title
TableOn – WordPress Posts Table Filterable < 1.0.4 - Unauthenticated Stored Cross-Site Scripting
Published
2025-08-19
Title
iFrame Block <= 0.1.1 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2021-11-15
Title
Security Audit <= 1.0.0 - Admin+ Stored Cross Site Scripting
Published
2024-06-27
Title
Conversios.io - All-in-one Google Analytics, Pixels and Product Feed Manager for WooCommerce < 7.1.1 - Reflected Cross-Site Scripting