Common vulnerabilities and Exposures (CVE)

Skip to main content

Required CVE Record Information

Description

The WP Hide & Security Enhancer WordPress plugin before 1.8 does not escape a parameter before outputting it back in an attribute of a backend page, leading to a Reflected Cross-Site Scripting

Product Status

Learn more

Versions 1 Total

Default Status: unknown

affected

  • affected from 1.8 before 1.8 

Credits

  • Krzysztof Zając

Updated:

This container includes required additional information provided by the CVE Program for this vulnerability.