| Package | Affected versions | Patched versions |
|---|---|---|
| sign-up sheets | < 2.2.13 | 2.2.13 |
The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $_SERVER['REQUEST_URI'] parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free