The MS-Reviews WordPress plugin through 1.5 does not sanitise and escape reviews, which could allow users any authenticated users, such as Subscribers to perform Stored Cross-Site Scripting attacks
Products Affected
| Vendor | Product | Version |
|---|---|---|
| ms-reviews_project | ms-reviews | * |