| Package | Affected versions | Patched versions |
|---|---|---|
| wpqa builder | < 5.4 | 5.4 |
The WPQA Builder WordPress plugin before 5.4, used as a companion for the Discy and Himer , does not sanitise and escape a parameter on its reset password form which makes it possible to perform Reflected Cross-Site Scripting attacks
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free