Log out
Get PRO

Latest

Input validation vulnerability in The Great Firewords of China 1.2

  • Severity: medium-risk
  • Status: Open
  • Publication: January 16, 2025

The Great Firewall of China plugin for WordPress has a security issue called Stored Cross-Site Scripting. This means that all versions up to 1.2 are vulnerable because they do not properly clean up the input and output. This allows attackers who are logged in with Subscriber-level access or higher to insert harmful web scripts into pages. These scripts will then run whenever a user visits the infected page.

Detected in:

The Great Firewords of China open vulnerable versions: >= * <= 1.2

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

  • Incorrect?

Is this information incorrect? Please leave us a message.