Post Kinds < 1.3.1.1 - Cross-Site Scripting
mediumThe indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.
- CVSS:
- 6.1
- Affected:
- up to 1.3.1.1
- Fixed in:
- 1.3.1.1
- Disclosed:
- May 13, 2015
plugin
1 known security issue reported for the Indieweb Post Kinds WordPress plugin. Most recent disclosed May 13, 2015.
Running Indieweb Post Kinds on your site? Check whether your installed version is affected.
Scan your site freeThe indieweb-post-kinds plugin before 1.3.1.1 for WordPress has XSS via the genericons/example.html anchor identifier.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free