Log out
Get PRO

Latest

Input validation vulnerability in FLOWFACT WP Connector 2.1.7

  • Severity: medium-risk
  • Status: Open
  • Publication: October 25, 2023

The FLOWFACT WP Connector plugin for WordPress is vulnerable to a security threat known as Reflected Cross-Site Scripting. This vulnerability exists in versions up to, and including, 2.1.7 and it occurs because the plugin doesn’t properly sanitize input or escape output. This means that malicious attackers can inject dangerous web scripts onto pages that will execute if a user clicks on something that has been tampered with.

Detected in:

FLOWFACT WP Connector open vulnerable versions: >= * <= 2.1.8

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.