Zephyr Project Manager, d212f4bf8f3932058081ea05860fc6376a03b245

CVE, Research URL: d212f4bf8f3932058081ea05860fc6376a03b245
Home page URL: Security reports for Zephyr Project Manager
Application: Zephyr Project Manager
Published on: Aug 29, 2022
Research Description: Zephyr Project Manager [zephyr-project-manager] < 3.2.5 Zephyr Project Manager <= 3.2.42 - Reflected Cross-Site Scripting The Zephyr Project Manager plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions up to, and including, 3.2.42 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 3.2.5.
Status: vulnerable