Skip to content
OpenAdvisories

Vendor

itsananderson

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 4.4

    Short Comment Filter <= 2.2 - Authenticated (Administrator+) Stored Cross-Site Scripting via 'Minimum Count' Setting

    The Short Comment Filter plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Minimum Count' settings field in all versions up to and including 2.2. This is due to insufficient input sanitization (no sanitize callback on register_setting…