A tool called Hive Support, used for WordPress websites, has a security issue called Reflected Cross-Site Scripting. This can happen in versions 1.2.2 and below because the tool does not clean up input and output properly. This means that someone who is not logged in can add dangerous scripts to a page if they can trick a user into doing something, like clicking on a link.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
