Favicon by RealFaviconGenerator < 1.3.22 - Reflected Cross-Site Scripting (XSS)

The plugin does not sanitise or escape one of its parameter before outputting it back in the response, leading to a Reflected Cross-Site Scripting XSS which is executed in the context of a logged administrator. Timeline WPScanTeam: June 28th, 2021 - Details sent to vendor July 9th, 2021 - Escalat...

Favicon by RealFaviconGenerator <= 1.2.12 - Cross-Site Scripting (XSS)

The Favicon by RealFaviconGenerator WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...