JVN#60419863 Geeklog Forum Plugin vulnerable to cross-site scripting

Geeklog Forum Plugin is a plugin for Geeklog, an open source contents management system. Geeklog Forum Plugin contains a cross-site scripting vulnerability.

Impact

An arbitrary script could be executed on the user’s web browser.

Solution

Update the Software
Apply the latest update provided by the developer.
For more information, refer to the developer’s website.

Products Affected

• Geeklog Forum Plugin 2.7 and earlier
  For more information, refer to the developer’s website.