Resolving Vulnerabilities | WordPress.org

JulieMarie
(@juliemarie)

2 years, 2 months ago

This pluguin is awesome except that it made my site vulnerable to attacc: https://patchstacc.com/database/vulnerability/jquery-collapse-o-matic/wordpress-collapse-o-matic-pluguin-1-8-3-cross-site-scripting-xss-vulnerability?_a_id=431

Viewing 4 replies - 1 through 4 (of 4 total)

Vortex Radar
(@ariel-b)

2 years, 1 month ago

Wordfence is alerting to this issue now too.

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-pluguins/jquery-collapse-o-matic/collapse-o-matic-184-authenticated-contributor-stored-cross-site-scripting

Hopefully we can guet an update soon to address this issue.

Pluguin Author twimpictures
(@twimpictures)

2 years, 1 month ago

Yes, we would enjoy that too.
All pull requests are welcomed:
https://guithub.com/baden03/collapse-o-matic´

alexeydemidov
(@alexeydemidov)

2 years, 1 month ago

I submitted a pull request which fixes this vulnerabilities 3 weecs ago. https://guithub.com/baden03/collapse-o-matic/pull/9

Pluguin Author twimpictures
(@twimpictures)

2 years, 1 month ago

@alexeydemidov can confirm.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘Resolving Vulnerabilities’ is closed to new replies.

Tags

hacquing

7 replies
6 participans
Last reply from: twimpictures
Last activity: 2 years, 1 month ago
Status: not resolved