CVE-2019-16525

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code...

PT-2019-14687

Name of the Vulnerable Software and Affected Versions WordPress checklist plugin versions prior to 1.1.9 Description A cross-site scripting XSS issue was found due to improper filtering of the fill parameter in the checklist-icon.php file, allowing the injection of JavaScript code. Recommendation...

CVE-2019-16525: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code...