PT-2019-15774

Name of the Vulnerable Software and Affected Versions CSS Hero plugin versions prior to 4.0.4 Description The issue is related to reflected XSS via the URI in a csshero action=edit page request. It occurs because the plugin fails to sufficiently sanitize user-supplied input, allowing an attacker ...