Martins Free & Easy SEO BackLink Link Building Network <= 1.2.29 - Reflected Cross-Site Scripting via _wpnonce
mediumThe Martins Free & Easy SEO BackLink Link Building Network – Improve Rankings & Traffic plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the ‘ _wpnonce’ parameter in versions up to and including 1.2.29 due to insufficient input sanitization and output escaping. This makes it possible for unauthe...
- CVSS:
- 6.1
- Affected:
- up to 1.2.29
- Fixed in:
- 1.2.30
- Disclosed:
- Nov 6, 2023