bbp style pack < 5.5.6 - Reflected XSS

The plugin does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin...

WordPress bbp style pack Plugin <= 5.5.5 is vulnerable to Cross Site Scripting (XSS)

Software bbp style pack Type Plugin Vulnerable versions = 5.5.5 Fixed in 5.5.6 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-33997 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID c8f5365769f1 Credits thiennv Required...