WP tarteaucitron.js Self Hosted <= 1.2.4 - Running a Vulnerable Dependency
mediumThe WP tarteaucitron.js Self Hosted plugin for WordPress is running a vulnerable dependency (version 20210310 of tarteaucitron) in all versions up to, and including, 1.2.4. This package is vulnerable to Cross-Site Scripting, though it has not been confirmed if the plugin itself is vulnerable to attack through this depe...
- CVSS:
- 6.1
- Affected:
- up to 1.2.4
- Fix:
- No patched version reported
- Disclosed:
- Feb 24, 2025