Log out
Get PRO

Latest

Input validation vulnerability in Notice Bar 3.1.0

  • Severity: medium-risk
  • Status: Fixed
  • Publication: September 5, 2023

The Notice Bar plugin for WordPress has a security vulnerability that can allow attackers to inject malicious web scripts in pages. This vulnerability affects versions up to 3.1.0 and is caused by the plugin not adequately protecting against malicious input and output. To exploit this vulnerability, the attacker would need to have at least Contributor level access to the WordPress site. Any webpage injected with malicious scripts would execute when a user visits the page.

Detected in:

Notice Bar fixed vulnerable versions: >= * <= 3.1.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.