WP24 Domain Check, 78ea2ec0fca01dd53451fe8e05374ed7fbe409bb

CVE, Research URL: 78ea2ec0fca01dd53451fe8e05374ed7fbe409bb
Home page URL: Security reports for WP24 Domain Check
Application: WP24 Domain Check
Published on: Jan 06, 2021
Research Description: WP24 Domain Check [wp24-domain-check] < 1.6.3 WP24 Domain Check <= 1.6.2 - Cross-Site Scripting The WP24 Domain Check plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several parameters in versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permissions and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.
Affected versions: max 1.6.3.
Status: vulnerable