Description
The WP Meta SEO WordPress plugin before 4.4.7 does not sanitise or escape the breadcrumb separator before outputting it to the page, allowing a high privilege user such as an administrator to inject arbitrary javascript into the page even when unfiltered html is disallowed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP Meta SEO | 4.4.7 – < 4.4.7 | 4.4.7 |