Automatic Pages For Privacy Policy Terms About And Contact Vulnerabilities

The Automatic pages plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 1.41 due to the use of add_query_arg/remove_query_arg with insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts...

CVSS:

6.1

Affected:

up to 1.41

Fixed in:

1.42

Disclosed:

Aug 1, 2022