XSS Fix | WordPress.org

tas50
(@tas50)

10 years, 10 months ago

I’m seeing that this plugin has a XSS vulnerability listed at https://wpvulndb.com/vulnerabilities/7976. Is there a plan to resolve this issue?

https://wordpress.org/plugins/yet-another-related-posts-plugin/

Viewing 2 replies - 1 through 2 (of 2 total)

xinomilo
(@xinomilo)

10 years, 9 months ago

any updates on this?

ethicalhack3r
(@ethicalhack3r)

10 years, 9 months ago

Ryan from wpvulndb here.

The CSRF seems to have been attempted to have been fixed – https://plugins.trac.wordpress.org/changeset/1160452/yet-another-related-posts-plugin (not mentioned in the changelog)

The XSS does not seem to have been fixed at the time of writing from what I can tell from looking at Trac.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘XSS Fix’ is closed to new replies.

2 replies
3 participants
Last reply from: ethicalhack3r
Last activity: 10 years, 9 months ago
Status: not resolved