Input validation vulnerability in Drive Folder Embedder 1.1.0

The Drive Folder Embedder plugin for WordPress has a security issue that allows hackers to inject harmful scripts into web pages. This can happen because the plugin does not properly filter and protect the input and output of the ‘tablecssclass’ parameter. As a result, attackers with at least Contributor-level access can exploit this vulnerability and potentially harm users who visit the affected pages.

Detected in:

Drive Folder Embedder open vulnerable versions: >= * <= 1.1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.