Input validation vulnerability in Custom Word Cloud 0.3

The plugin called Custom Word Cloud for WordPress has a security issue. It can be attacked through a parameter called ‘angle’ in versions 0.3 and below. This happens because the plugin does not properly check the input and protect against harmful scripts. This allows people who have Contributor access or higher to insert their own scripts into pages, which will run when someone visits the affected page.

Detected in:

Custom Word Cloud open vulnerable versions: >= * <= 0.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.