| Package | Affected versions | Patched versions |
|---|---|---|
| prismatic | < 2.8 | 2.8 |
The Prismatic WordPress plugin before 2.8 does not escape the 'tab' GET parameter before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue which will be executed in the context of a logged in administrator
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free