The WebARX plugin 1.3.0 for WordPress has unauthenticated stored XSS via the URI or the X-Forwarded-For HTTP header.

Published Oct 6, 2019 · Updated Aug 5, 2024 · Assigned by mitre