WordPress Plugin Vulnerabilities
WordPress Popular Posts < 5.3.4 - Admin+ Stored Cross-Site Scripting
Description
The plugin does not sanitise and escape the widget-wpp[2][post_type] parameter before outputting it in the page, which could lead to a Stored Cross-Site Scripting issue
Affects Plugins
Fixed in 5.3.4 References
CVE
Classification
Type
XSS
OWASP top 10
CWE
CVSS
Miscellaneous
Original Researcher
Visse
Verified
No
WPVDB ID
Timeline
Publicly Published
2021-07-03 (about 4 years ago)
Added
2021-09-23 (about 4 years ago)
Last Updated
2022-04-09 (about 4 years ago)
WPScan 