WordPress Plugin Vulnerabilities
WordPress Popular Posts < 5.3.4 - Admin+ Stored Cross-Site Scripting
Description
The plugin does not sanitise and escape the widget-wpp[2][post_type] parameter before outputting it in the page, which could lead to a Stored Cross-Site Scripting issue
Affects Plugins
Fixed in version 5.3.4
References
Classification
Miscellaneous
Timeline
Publicly Published
2021-07-03 (about 1 years ago)
Added
2021-09-23 (about 1 years ago)
Last Updated
2022-04-09 (about 9 months ago)