cleantalk
Vulnerabilities and Security Researches

Powie's WHOIS Domain Check, 8c8a8a35-a04f-429e-8843-8201eebab421

Published on
-
Research Description
Powie&#039;s WHOIS Domain Check [powies-whois] < 0.9.33 Powie&#039;s WHOIS Domain Check &lt; 0.9.33 - Authenticated Stored Cross-Site Scripting The plugin does not properly sanitise and encode user input when output back in its settings page, leading to authenticated (from high privileged users) stored Cross-Site Scripting (XSS) issues.
Affected versions
max 0.9.33.
Status
vulnerable