Skip to content
OpenAdvisories

Vendor

fpoller

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.4

    Private WP suite <= 0.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Exceptions' Setting

    The Private WP suite plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Exceptions' setting in all versions up to, and including, 0.4.1. This is due to insufficient input sanitization and output escaping. This makes it possible for aut…