Vendor
Notification – Custom Notifications and Alerts for WordPress
1 known vulnerabilities.
1 result · Clear filters · Feed
-
Medium 4.8
Notification – Custom Notifications and Alerts for WordPress <= 7.2.4 Authenticated Stored Cross-Site Scripting
The Notification WordPress plugin is vulnerable to Stored Cross-Site Scripting due to insufficient input validation and sanitization via several parameters found in the ~/src/classes/Utils/Settings.php file which made it possible for attackers with administra…