Z-URL Preview <= 1.6.2 - Cross-Site Scripting
mediumThe Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter.
- CVSS:
- 6.1
- Affected:
- up to 2.0.0
- Fixed in:
- 2.0.0
- Disclosed:
- Dec 5, 2017
plugin
1 known security issue reported for the Z Url Preview WordPress plugin. Most recent disclosed Dec 5, 2017.
Running Z Url Preview on your site? Check whether your installed version is affected.
Scan your site freeThe Z-URL Preview plugin 1.6.1 for WordPress has XSS via the class.zlinkpreview.php url parameter.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free