PT-2020-10053

Name of the Vulnerable Software and Affected Versions wpForo plugin version 1.6.5 Description The issue allows for XSS via the "wp-admin/admin.php?page=wpforo-phrases" API endpoint, specifically through the langid parameter. Recommendations For wpForo plugin version 1.6.5, avoid using the langid...

PT-2020-10052

Name of the Vulnerable Software and Affected Versions wpForo plugin version 1.6.5 Description The issue allows for XSS via the "s" parameter in the "/admin.php?page=wpforo-phrases" API endpoint. Recommendations For wpForo plugin version 1.6.5, avoid using the s parameter in the...