Salutation < 3.0.16 - Authenticated Stored Cross-Site Scripting
mediumStored XSS in Salutation Responsive WordPress + BuddyPress Theme version 3.0.15 could allow logged-in users to do almost anything an admin can.
- CVSS:
- 6.4
- Affected:
- up to 3.0.16
- Fixed in:
- 3.0.16
- Disclosed:
- Jul 31, 2017