Input validation vulnerability in Inline Footnotes 2.3.0

The Inline Footnotes plugin for WordPress has a security issue called Stored Cross-Site Scripting in versions up to 2.3.0. This happens because the plugin does not properly filter and protect the input and output of the information it receives. This means that someone with contributor-level access or higher can insert harmful web scripts into pages that will automatically run when someone views that page.

Detected in:

Inline Footnotes open vulnerable versions: >= * <= 2.3.0

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.