| Package | Affected versions | Patched versions |
|---|---|---|
| sign-up sheets | < 1.0.14 | 1.0.14 |
The Sign-up Sheets WordPress plugin before 1.0.14 did not sanitise or escape some of its fields when creating a new sheet, allowing high privilege users to add JavaScript in them, leading to a Stored Cross-Site Scripting issue. The payloads will be triggered when viewing the 'All Sheets' page in the admin dashboard
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free