SiteOrigin CSS Cross-Site Scripting Vulnerabilities

SiteOrigin CSS 1.6.7 and earlier versions have a cross-site scripting vulnerability. This vulnerability stems from improper input cleaning and output escaping. It involves a DOM-based cross-site scripting attack via the 'url commentauthorurl' parameter. Unauthenticated attackers can inject...