WordPress DesignSetGo cross-site scripting vulnerability

WordPress DesignSetGo versions 2.11.0 and earlier contain a cross-site scripting vulnerability. This flaw stems from insufficient input sanitization and output escaping. Authentication attackers with contributor or higher privileges can inject arbitrary web scripts via the ‘tagName’ parameter,...