Unscored CVE-2016-1160 EUVD-2016-2264GHSA-p9gx-xp2f-77w2

Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbit…

Published Mar 26, 2016 · Updated Aug 5, 2024 · Assigned by jpcert

Description

Cross-site scripting (XSS) vulnerability in the WP Favorite Posts plugin before 1.6.6 for WordPress allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References

JVNDB-2016-000034 third-party-advisory
JVN#86517621 third-party-advisory
https://wordpress.org/plugins/wp-favorite-posts/changelog/