WordPress Shortcode For Current Date plugin” (versions <= 2.1.6) AuthenticatedStored Cross-Site Scripting (XSS) vulnerability

2022年7月8日(金) 11:21

重大性スコア(CVS)

Details

Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by RyanDewhurst in the WordPressShortcodeFor Current Date plugin (version <= 2.1.6).

solution

Deactivate and delete.

Sources.

Shortcode for Current Date

Insert current Date, Month or Year anywhere in your WordPress site with a simple shortcode.