CVE-2021-38321

The Custom Menu Plugin WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the selectedmenu parameter found in the /custom-menus.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.3.3...

PT-2021-22039

Name of the Vulnerable Software and Affected Versions: Custom Menu Plugin WordPress plugin versions up to and including 1.3.3 Description: The issue allows attackers to inject arbitrary web scripts via the selected menu parameter in the /custom-menus.php file, enabling Reflected Cross-Site...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports personal blog sites on PHP and MySQL servers. A security vulnerability exists in WordPress plugin Custom Menu Plugin 1.3.3 and earlier versions, which originates...