| Package | Affected versions | Patched versions |
|---|---|---|
| workscout | < 2.0.33 | 2.0.33 |
| workscout core | < 1.3.4 | 1.3.4 |
The Workscout Core WordPress plugin before 1.3.4, used by the WorkScout Theme did not sanitise the chat messages sent via the workscout_send_message_chat AJAX action, leading to Stored Cross-Site Scripting and Cross-Frame Scripting issues
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free