Lucene search

K
wpvulndbWpvulndbWPVDB-ID:58AB5352-D783-431A-B0A5-382381CC13FD
HistoryJul 25, 2023 - 12:00 a.m.

Freemius SDK < 2.5.10 - Reflected Cross-Site Scripting

2023-07-2500:00:00
wpscan.com
22
freemius
sdk
wordpress
sanitize
inputs
escape
outputs
cross-site scripting
plugins
themes

AI Score

6.3

Confidence

High

Description The Freemius SDK for WordPress does not adequately sanitize inputs or escape outputs, leading to Reflected Cross-Site Scripting. This directly affects over 1000 plugins and themes that use this SDK.

AI Score

6.3

Confidence

High

Related for WPVDB-ID:58AB5352-D783-431A-B0A5-382381CC13FD