2 matches found
WP Visited Countries Reloaded < 3.1.1 - Reflected Cross-Site Scripting
The plugin does not escape the page parameter in its Countries dashboard before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting issue alert/XSS/' /...
WordPress WP Visited Countries Reloaded plugin <= 3.1.0 - Reflected Cross-Site Scripting (XSS) vulnerability
Reflected Cross-Site Scripting XSS vulnerability discovered by WPScanTeam in WordPress WP Visited Countries Reloaded plugin versions = 3.1.0. Solution Update the WordPress WP Visited Countries Reloaded plugin to the latest available version at least 3.1.1...