| Package | Affected versions | Patched versions |
|---|---|---|
| bannerman | ≤ 0.2.4 |
The BannerMan WordPress plugin through 0.2.4 does not sanitize or escape its settings, which could allow high-privileged users to perform Cross-Site Scripting attacks when the unfiltered_html is disallowed (such as in multisite)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free