Really Simple Security logo

Log out
Get PRO

Latest

Input validation vulnerability in Front End Users 3.2.25

  • Severity: medium-risk
  • Status: Open
  • Publication: May 22, 2023

The Front End Users plugin for WordPress is vulnerable to an attack called Cross-Site Scripting (XSS). This attack can happen to versions up to and including 3.2.25. The attack is possible because the plugin does not properly check the data it receives or make sure it is safe before it is used. Unauthenticated attackers can inject malicious scripts into pages that will then run when a user accesses the page.

Detected in:

Front End Users open vulnerable versions: >= * <= 3.2.24

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.