Skip to content
OpenAdvisories

Vendor

KJM Admin Notices

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.5

    KJM Admin Notices <= 2.0.1 Authenticated Stored Cross-Site Scripting

    The KJM Admin Notices WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/admin/class-kjm-admin-notices-admin.php file which allowed attackers with administr…