CVE
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2014-4724 | Custom Banners [custom-banners] < 2.1 (closed) | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | Unknown | < 2.1 | 2.1 | 2014-06-29 | — |
Cross-site scripting (XSS) vulnerability in the Custom Banners plugin before 2.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the custom_banners_registered_name parameter to wp-admin/options.php.
Source: Wordfence
No signup, no credit card — enter your URL and get a security report in seconds.