| Package | Affected versions | Patched versions |
|---|---|---|
| wordpress related posts | ≤ 3.6.4 |
The WordPress Related Posts plugin through 3.6.4 contains an authenticated (admin+) stored XSS vulnerability in the title field on the settings page. By exploiting that an attacker will be able to execute JavaScript code in the user's browser.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free