Lucene search

K
patchstackFrancesco CarlucciPATCHSTACK:9F06213592FFD848858CA0AC3F957C89
HistoryApr 25, 2022 - 12:00 a.m.

WordPress WP Subtitle plugin <= 3.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2022-04-2500:00:00
Francesco Carlucci
patchstack.com
8
wordpress
subtitle
plugin
cross-site scripting
xss
francesco carlucci
update

EPSS

0.001

Percentile

24.8%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Francesco Carlucci in WordPress WP Subtitle plugin (versions <= 3.4).

Solution

           Update the WordPress WP Subtitle plugin to the latest available version (at least 3.4.1).

EPSS

0.001

Percentile

24.8%

Related for PATCHSTACK:9F06213592FFD848858CA0AC3F957C89