Description (CNA)
The Sitewide Notice WP WordPress plugin before 2.3 does not sanitise some of its settings before outputting them in frontend pages, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Unknown / Sitewide Notice WP | affected 2.3 before 2.3 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.