| Package | Affected versions | Patched versions |
|---|---|---|
| easy fancybox | < 1.8.18 | 1.8.18 |
The easy-fancybox plugin before 1.8.18 for WordPress (aka Easy FancyBox) is susceptible to Stored XSS in the Settings Menu inc/class-easyfancybox.php due to improper encoding of arbitrarily submitted settings parameters. This occurs because there is no inline styles output filter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free