Input validation vulnerability in Cost Calculator Builder 3.2.74

The Cost Calculator Builder plugin for WordPress has a security issue called Stored Cross-Site Scripting in versions up to 3.2.74. This happens because the plugin does not properly clean up the input and output of information. This means that someone with high access to the website can add harmful code to a page that will run when someone views it. This problem only affects websites with multiple sites or websites that have disabled a security feature called unfiltered_html.

Detected in:

Cost Calculator Builder fixed vulnerable versions: >= * <= 3.2.74

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.