Authors List, cbbd4ece10cadfe6b69d301bf453299da41ad0b8

CVE, Research URL: cbbd4ece10cadfe6b69d301bf453299da41ad0b8
Home page URL: Security reports for Authors List
Application: Authors List
Published on: Jul 10, 2023
Research Description: Authors List [authors-list] < 2.0.3 Authors List <= 2.0.2 - Reflected Cross-Site Scripting via al_id The Authors List plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the al_id parameter in versions up to, and including, 2.0.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 2.0.3.
Status: vulnerable