WordPress Ultimate FAQ <1.8.30 - Cross-Site Scripting Detection

WordPress Ultimate FAQ plugin before 1.8.30 is susceptible to cross-site scripting via DisplayFAQ to Shortcodes/DisplayFAQs.php. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based...

CVE-2020-7107

The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via DisplayFAQ to Shortcodes/DisplayFAQs.php...

CVE-2020-7107

The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via DisplayFAQ to Shortcodes/DisplayFAQs.php...

PT-2020-19375

Name of the Vulnerable Software and Affected Versions The Ultimate FAQ plugin versions prior to 1.8.30 Description The issue allows for XSS via the Display FAQ to Shortcodes/DisplayFAQs.php. Recommendations For versions prior to 1.8.30, update to version 1.8.30 or later to resolve the issue...

CVE-2020-7107: Improper Neutralization of Input During Web Page Generation

The Ultimate FAQ plugin before 1.8.30 for WordPress allows XSS via DisplayFAQ to Shortcodes/DisplayFAQs.php...