WordPress Button Plugin MaxButtons, CVE-2017-2169

CVE, Research URL: CVE-2017-2169
Home page URL: Security reports for WordPress Button Plugin MaxButtons
Application: WordPress Button Plugin MaxButtons
Published on: May 22, 2017
Research Description: Cross-site scripting vulnerability in MaxButtons prior to version 6.19 and MaxButtons Pro prior to version 6.19 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected versions: max 6.19.
Status: vulnerable