cleantalk
Vulnerabilities and Security Researches

Campaign URL Builder, cf306593fd6b456d6c0e130e3df300859dd3c130

Application

Campaign URL Builder

Published on
Feb 16, 2023
Research Description
Campaign URL Builder [campaign-url-builder] < 1.8.2 WordPress Campaign URL Builder Plugin <= 1.8.1 is vulnerable to Cross Site Scripting (XSS) Update the WordPress Campaign URL Builder plugin to the latest available version (at least 1.8.2). WordFence discovered and reported this Cross Site Scripting (XSS) vulnerability in WordPress Campaign URL Builder Plugin. This could allow a malicious actor to inject malicious scripts, such as redirects, advertisements, and other HTML payloads into your website which will be executed when guests visit your site. This vulnerability has been fixed in version 1.8.2.
Affected versions
max 1.8.2.
Status
vulnerable