| Package | Affected versions | Patched versions |
|---|---|---|
| splash header | < 1.20.8 | 1.20.8 |
The Splash Header WordPress plugin before 1.20.8 doesn't sanitise and escape some of its settings while outputting them in the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free