Fudousan Plugin <= 5.7.0 - Cross-Site Scripting
highCross-site scripting vulnerability in Fudousan plugin ver5.7.0 and earlier, Fudousan Plugin Pro Single-User Type ver5.7.0 and earlier, and Fudousan Plugin Pro Multi-User Type ver5.7.0 and earlier allows a remote authenticated attacker to inject an arbitrary script via unspecified vectors.
- CVSS:
- 7.1
- Affected:
- up to 5.7.0
- Fix:
- No patched version reported
- Disclosed:
- Jun 22, 2021