Description
The WPCode WordPress plugin before 2.0.13.1 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WPCode | < 2.0.13.1 | 2.0.13.1 |
References
- https://wpscan.com/vulnerability/89570379-769b-4684-b8a7-28c37b408e5d exploit vdb-entry technical-description