AnyVar <= 0.1.1 - Cross-Site Scripting
mediumPersistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1 via var_name parameter.
- CVSS:
- 6.1
- Affected:
- up to 0.1.1
- Fix:
- No patched version reported
- Disclosed:
- Feb 20, 2017
plugin
1 known security issue reported for the Anyvar WordPress plugin. Most recent disclosed Feb 20, 2017.
Running Anyvar on your site? Check whether your installed version is affected.
Scan your site freePersistent XSS Vulnerability in Wordpress plugin AnyVar v0.1.1 via var_name parameter.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free