Description
The WP ULike WordPress plugin before 4.7.2.1 does not properly sanitize user display names when rendering on a public page.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | WP ULike | 4.7.1 – < 4.7.2.1 | 4.7.2.1 |
References
- https://wpscan.com/vulnerability/3c470edd-4b9b-461e-839f-f3a87f0060aa/ exploit vdb-entry technical-description