Description
The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | MS-Reviews | ≤ 1.5 | — |
References
- https://wpscan.com/vulnerability/b0f8713f-54b2-4ab2-a475-60a1692a50e9 exploit vdb-entry technical-description