WordPress Plugin Vulnerabilities

AMP for WP < 1.0.77.33 - Admin+ Stored Cross-Site Scripting

Description

The plugin does not escape some of its settings, which could allow high privilege users to perform Cross-Site Scripting attacks

Affects Plugins

Fixed in 1.0.77.33

References

Classification

Type
XSS
CWE
CVSS

Miscellaneous

Original Researcher
Ex.Mi
Verified
No

Timeline

Publicly Published
2021-12-15 (about 4 years ago)
Added
2022-03-20 (about 4 years ago)
Last Updated
2022-04-10 (about 4 years ago)

Other