Zephyr Project Manager, c20adfc1d187846ec397ff5e47c6c85535b1b51e

CVE, Research URL: c20adfc1d187846ec397ff5e47c6c85535b1b51e
Home page URL: Security reports for Zephyr Project Manager
Application: Zephyr Project Manager
Published on: Aug 29, 2022
Research Description: Zephyr Project Manager [zephyr-project-manager] < 3.2.5 WordPress Zephyr Project Manager plugin <= 3.2.42 - Unauthorized REST Calls to Stored Cross-Site Scripting (XSS) vulnerability Unauthorized REST Calls to Stored Cross-Site Scripting (XSS) vulnerability discovered by WPScan in WordPress Zephyr Project Manager plugin (versions <= 3.2.42). Update the WordPress Zephyr Project Manager plugin to the latest available version (at least 3.2.5).
Affected versions: max 3.2.5.
Status: vulnerable