Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in BuddyDev BuddyPress Notification Widget buddypress-notifications-widget allows Stored XSS.This issue affects BuddyPress Notification Widget: from n/a through <= 1.3.3.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| BuddyDev | BuddyPress Notification Widget | ≤ 1.3.3 | — |