WP Shieldon <= 1.6.3 - Reflected Cross-Site Scripting
mediumUnvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting (XSS) when the CAPTCHA page is shown could lead to privileged escalation.
- CVSS:
- 6.1
- Affected:
- up to 1.6.3
- Fixed in:
- 1.6.4
- Disclosed:
- Jan 18, 2021