Invite Anyone, ae275717e9ce52f64daecbc97587cc20a1342d6b

CVE, Research URL: ae275717e9ce52f64daecbc97587cc20a1342d6b
Home page URL: Security reports for Invite Anyone
Application: Invite Anyone
Published on: Mar 22, 2017
Research Description: Invite Anyone [invite-anyone] < 1.3.16 WordPress Invite Anyone plugin <=1.3.15 - Cross-Site Request Forgery (CSRF)/Cross-Site Scripting (XSS) Vulnerability WordPress Invite Anyone plugin Cross-Site Request Forgery (CSRF) and Cross-Site Scripting (XSS) vulnerabilities were found in 1.3.15 version. The settings are passed without any sanitization to function register_setting(). Update the plugin.
Affected versions: max 1.3.16.
Status: vulnerable