Vendor
KJM Admin Notices
1 known vulnerabilities.
Products
1 result · Clear filters · Feed
-
Medium 5.5
KJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site Scripting
The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin/class-kjm-admin-notices-admin.php file which allowed attackers with administr…