Lucene search

K
patchstackTruoc PhanPATCHSTACK:E1252096B4D45E84ECD714D38F1093F9
HistoryMay 04, 2021 - 12:00 a.m.

WordPress WP Customer Reviews plugin <= 3.5.5 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

2021-05-0400:00:00
Truoc Phan
patchstack.com
6

0.001 Low

EPSS

Percentile

24.8%

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Truoc Phan in WordPress WP Customer Reviews plugin (versions <= 3.5.5).

Solution

           Update the WordPress WP Customer Reviews plugin to the latest available version (at least 3.5.6).
CPENameOperatorVersion
wp customer reviewsle3.5.5

0.001 Low

EPSS

Percentile

24.8%

Related for PATCHSTACK:E1252096B4D45E84ECD714D38F1093F9