{"id":17314510,"date":"2024-01-03T08:36:34","date_gmt":"2024-01-03T08:36:34","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&#038;p=17314510"},"modified":"2024-01-03T09:28:44","modified_gmt":"2024-01-03T09:28:44","slug":"plugin-has-vulnerability-issues","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/plugin-has-vulnerability-issues\/","title":{"rendered":"Plugin has vulnerability issues"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The plugin does not validate and escape some of its shortcode attributes before outputting them back in a page\/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks<br \/><br \/><a href=\"https:\/\/wpscan.com\/vulnerability\/e54804c7-68a9-4c4c-94f9-1c3c9b97e8ca\/\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/wpscan.com\/vulnerability\/e54804c7-68a9-4c4c-94f9-1c3c9b97e8ca\/<\/a><\/p>\n","protected":false},"template":"","class_list":["post-17314510","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/17314510","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/17314510\/revisions"}],"predecessor-version":[{"id":17314592,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/17314510\/revisions\/17314592"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=17314510"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}