Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in 野人 活动链接推广插件 yr-activity-link allows DOM-Based XSS.This issue affects 活动链接推广插件: from n/a through <= 1.2.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| 野人 | 活动链接推广插件 | ≤ 1.2.0 | — |