The tagDiv Composer plugin is a tool for WordPress websites that was vulnerable to a type of attack called Stored Cross-Site Scripting. This attack allowed people who weren’t authorized to inject malicious web scripts into pages which would then run on the site when accessed by other users. The vulnerability was partially fixed in version 4.1 of the plugin, and fully addressed with additional security measures in version 4.2.
This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!
Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:
> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21
Is this information incorrect? Please leave us a message.
© Really Simple Plugins
CoC 70461155
Kalmarweg 14-5
9723 JG, Groningen (NL)
