Skip to content
OpenAdvisories

Vendor

MPL-Publisher

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.5

    MPL-Publisher – Self-publish your book & ebook <= 1.30.2 Authenticated Stored Cross-Site Scripting

    The MPL-Publisher WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/libs/PublisherController.php file which allowed attackers with administrative user acce…