Description
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WordPress Related Posts | 3.6.4 – ≤ 3.6.4 | — |