Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Add Custom Body Class 1.4.1

  • Severity: medium-risk
  • Status: Open
  • Publication: October 20, 2023

The Add Custom Body Class plugin for WordPress has a security vulnerability that can allow an attacker with contributor-level access or above to inject malicious web scripts into pages on the website. This vulnerability affects versions up to and including 1.4.1, and is caused by the plugin not adequately protecting against malicious input or output. If a user visits an affected page, the malicious web scripts will be executed.

Detected in:

Add Custom Body Class open vulnerable versions: >= * <= 1.4.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.