4.36 is vulnerable to Cross Site Scripting (XSS)

  • Resolved sjo007

    (@sjo007)


    5 months ago

    Hello,

    Patchstack is reporting this version is subject to a cross scripting error – grateful for an update to your excellent plugin to overcome this – thank you.

Viewing 6 replies - 1 through 6 (of 6 total)
  • Plugin Author A. Jones

    (@nomadcoder)

    5 months ago

    Yes, thanks for letting me know.

    Plugin Author A. Jones

    (@nomadcoder)

    5 months ago

    Patchstack hasn’t posted any details yet. Did they give you any details? It doesn’t look like a high priority issue and as far as I know, everything is escaped properly. I will probably have to wait for their email unless they gave you specific details.

    Plugin Author A. Jones

    (@nomadcoder)

    5 months ago

    Just to follow up, my testing has not shown what the issue is. WPScan does not reflect the issue and I do not have the ability to test it without specifics. Again, this is a low risk issue and will be fixed as soon as I get the report.

    Thread Starter sjo007

    (@sjo007)

    5 months ago

    Fully Understood and huge thanks for posting an update ! Thanks for the extra work this may cause you as well.

    Plugin Author A. Jones

    (@nomadcoder)

    4 months, 3 weeks ago

    Hello, I was able to reach patchstack and see the very obscure security issue which … I have not been able to duplicate. I will attempt to patch it ASAP.

    Plugin Author A. Jones

    (@nomadcoder)

    4 months, 2 weeks ago

    This should be resolved.

Viewing 6 replies - 1 through 6 (of 6 total)

You must be logged in to reply to this topic.