Description
The WPGlobus plugin 1.9.6 for WordPress has XSS via the wpglobus_option[selector_wp_list_pages][show_selector] parameter to wp-admin/options.php.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | wpglobus/wpglobus | < 1.9.7 | 1.9.7 | GHSA-mg4m-v9fc-9hcc |