Domain Check <= 1.0.16 - Reflected Cross-Site Scripting via domain
mediumThe Domain Check WordPress plugin before 1.0.17 does not sanitise and escape the domain parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting issue
- CVSS:
- 5.4
- Affected:
- up to 1.0.16
- Fixed in:
- 1.0.17
- Disclosed:
- Dec 28, 2021