| Package | Affected versions | Patched versions |
|---|---|---|
| checklist | < 1.1.9 | 1.1.9 |
An XSS issue was discovered in the checklist plugin before 1.1.9 for WordPress. The fill parameter is not correctly filtered in the checklist-icon.php file, and it is possible to inject JavaScript code.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free