The Animated AL List WordPress plugin through 1.0.6 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Products Affected
| Vendor | Product | Version |
|---|---|---|
| alexdtn | animated_al_list | * |
The Simple AL Slider WordPress plugin through 1.2.10 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Products Affected
| Vendor | Product | Version |
|---|---|---|
| alexdtn | simple_al_slider | * |