| Package | Affected versions | Patched versions |
|---|---|---|
| magic fields | < 1.7.2 | 1.7.2 |
The magic-fields plugin before 1.7.2 for WordPress has XSS via the RCCWP_CreateCustomFieldPage.php custom-group-id parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free