| Package | Affected versions | Patched versions |
|---|---|---|
| api bearer auth | < 2019-09-07 | 2019-09-07 |
In the api-bearer-auth plugin before 20190907 for WordPress, the server parameter is not correctly filtered in the swagger-config.yaml.php file, and it is possible to inject JavaScript code, aka XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free