Input validation vulnerability in DW Question & Answer 1.4.2.3

The DW Question & Answer plugin for WordPress is vulnerable to a type of security flaw known as Stored Cross-Site Scripting (XSS). This vulnerability affects versions 1.4.2.2 and earlier of the plugin. It happens when the plugin does not properly check the data it receives and doesn’t take precautions to protect against malicious code. This could allow an attacker to inject malicious code into a page that would then be executed when a user visits the page.

Detected in:

DW Question & Answer open vulnerable versions: >= * < 1.4.2.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.