Security Issue Reported <= 1.36.3

  • Resolved aapc

    (@aapc)


    2 days, 4 hours ago

    Patchstack has published a Cross Site Scripting (XSS) issue for <= 1.36.3. Albeit a low priority issue, it would be great if this was addressed soon. Thanks!

    The page I need help with: [log in to see the link]

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author Andrew Wilder

    (@eatingrules)

    2 days, 4 hours ago

    Hi @aapc — thanks for bringing this to our attention!

    This is the first we’re hearing of this (even though we had joined Patchstack’s mVDP program! 🤦‍♂️).

    We will look into it and get it addressed as soon as possible.

    Thanks,
    Andrew

    Plugin Author Andrew Wilder

    (@eatingrules)

    1 day, 22 hours ago

    We’ve released version 1.36.3.1 which addresses the vulnerability (confirmed by Patchstack).

    Just waiting for the 6-hour delay so that it becomes available; we’ve also emailed the plugins team to see if they can drop that waiting period. So we’re all set. 😊

    Thread Starter aapc

    (@aapc)

    1 day, 5 hours ago

    Thanks for the quick response and update!

Viewing 3 replies - 1 through 3 (of 3 total)

You must be logged in to reply to this topic.