Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in If-So Dynamic Content Personalization 1.6.3.1

  • Severity: medium-risk
  • Status: Fixed
  • Publication: December 27, 2023

The If-So Dynamic Content Personalization plugin for WordPress contains a security vulnerability that could allow attackers with contributor-level access or higher to inject malicious code into pages on your WordPress site. This code would then be executed whenever someone visits the page. The vulnerability is present in all versions of the plugin up to and including version 1.6.3.1, and is caused by insufficient sanitization and escaping of inputs and outputs.

Detected in:

If-So Dynamic Content Personalization fixed vulnerable versions: >= * <= 1.6.3.1

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.