Input validation vulnerability in Comments by Startbit 1.4

The Blog Filter plugin for WordPress is vulnerable to a type of cyber attack called Stored Cross-Site Scripting. This type of attack can be used to inject malicious code into web pages that a user visits. The versions of this plugin up to and including version 1.4 are vulnerable to this attack due to a lack of security measures that would sanitize user input and protect against malicious code. If an attacker with contributor-level or higher permissions were to exploit this vulnerability, they could inject malicious code into web pages that would execute when a user visits those pages.

Detected in:

Comments by Startbit open vulnerable versions: >= * <= 1.4

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.