Directories Pro < 1.3.46 - Authenticated Reflected Cross-Site Scripting
Description
The plugin did not sanitise the _drts_form_build_id parameter in a POST request to /wp-admin/admin.php?page=drts/directories, allowing for HTML or JavaScript injection.
Affects Plugins
Fixed in version 1.3.46✓
Classification
Miscellaneous
Timeline
Publicly Published
2020-12-12 (about 4 months ago)
Added
2020-12-12 (about 4 months ago)
Last Updated
2020-12-15 (about 4 months ago)