| Package | Affected versions | Patched versions |
|---|---|---|
| orbit fox | < 2.10.3 | 2.10.3 |
Orbit Fox by ThemeIsle has a feature to add custom scripts to the header and footer of a page or post. There were no checks to verify that a user had the unfiltered_html capability prior to saving the script tags, thus allowing lower-level users to inject scripts that could potentially be malicious.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free