| Package | Affected versions | Patched versions |
|---|---|---|
| userpro | ≤ 4.9.23 |
The UserPro plugin through 4.9.23 for WordPress allows XSS via the shortcode parameter in a userpro_shortcode_template action to wp-admin/admin-ajax.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free