Inline Related Posts, 8b9ee477f3905d19661a39145d5228f7ba92588d

CVE, Research URL: 8b9ee477f3905d19661a39145d5228f7ba92588d
Home page URL: Security reports for Inline Related Posts
Application: Inline Related Posts
Published on: Oct 09, 2021
Research Description: Inline Related Posts [intelly-related-posts] < 3.0.5 Inline Related Posts <= 3.0.4 - Authenticated (Admin+) Cross-Site Scripting The Inline Related Posts plugin for WordPress is vulnerable to Cross-Site Scripting in versions up to, and including, 3.0.4 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrative capabilities, to inject arbitrary web scripts that execute in a victim's browser. This only affects multi-site installations, and installations where unfiltered_html has been disabled.
Affected versions: max 3.0.5.
Status: vulnerable