Input validation vulnerability in Simple Alert Boxes 1.4.0

The Simple Alert Boxes plugin for WordPress has a security issue that allows attackers to inject harmful code into pages. This can be done by using the plugin’s Alert feature, and it affects all versions up to 1.4.0. This vulnerability is due to a lack of proper protection for user-provided information. As a result, authenticated attackers with contributor-level access or higher can insert their own scripts into pages, which will run whenever someone opens the affected page.

Detected in:

Simple Alert Boxes open vulnerable versions: >= * <= 1.4.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.