IMDB Info Box <= 2.0 - Stored Cross-Site Scripting
mediumThe IMDB info box WordPress plugin through 2.0 does not sanitize and escape some of its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
- CVSS:
- 5.5
- Affected:
- up to 2.0
- Fix:
- No patched version reported
- Disclosed:
- May 9, 2022