| Package | Affected versions | Patched versions |
|---|---|---|
| wp lead plus x | ≤ 0.98 |
An XSS vulnerability in the WP Lead Plus X plugin through 0.98 for WordPress allows logged-in users with minimal permissions to create or replace existing pages with a malicious page containing arbitrary JavaScript via the wp_ajax_core37_lp_save_page (aka core37_lp_save_page) AJAX action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free