Cloudflare, 1674fd5d30f242cd9c1196dcd4154e705baacb9c

CVE, Research URL: 1674fd5d30f242cd9c1196dcd4154e705baacb9c
Home page URL: Security reports for Cloudflare
Application: Cloudflare
Published on: Mar 28, 2016
Research Description: Cloudflare [cloudflare] < 1.3.21 Cloudflare < 1.3.21 - Cross-Site Scripting The Cloudflare plugin for WordPress is vulnerable to Cross-Site Scripting via several parameters in versions before 1.3.21 due to insufficient input sanitization and output escaping. This makes it possible for attackers to inject arbitrary web scripts that execute in a victim's browser.
Affected versions: max 1.3.21.
Status: vulnerable