PT-2021-16368

Name of the Vulnerable Software and Affected Versions: Pixel Cat WordPress plugin versions prior to 2.6.2 Description: The issue concerns a lack of CSRF check when saving settings and inadequate sanitization and escaping of certain settings in the Pixel Cat WordPress plugin. This could allow an...

PT-2021-16389

Name of the Vulnerable Software and Affected Versions: Pixel Cat WordPress plugin versions prior to 2.6.3 Description: The issue allows high privilege users to perform Cross-Site Scripting attacks, even when the unfiltered html is disallowed, due to the plugin not escaping some of its settings...