cleantalk
Vulnerabilities and Security Researches

EazyDocs – Most Powerful Knowledge base, wiki, Documentation Builder Plugin (easy docs, knowledgebase), 913e5bdbb292660af6d5220f0e324f2bd770e8b9

Published on
Jul 18, 2023
Research Description
EazyDocs &#8211; Most Powerful Knowledge base, wiki, Documentation Builder Plugin [eazydocs] < 2.3.6 (closed) WordPress EazyDocs Plugin <= 2.2.0 is vulnerable to Cross Site Scripting (XSS) Update the WordPress EazyDocs plugin to the latest available version (at least 2.2.1). Rafie Muhammad (Patchstack) discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress EazyDocs Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 2.2.1.
Affected versions
Min -, max 2.3.6.
Status
vulnerable