Vulnerability Bulletins

Stored XSS Patched in SyntaxHighlighter Evolved Plugin

   
Affected software Wordpress
 
https://www.wordfence.com/blog/2019/10/stored-xss-patched-in-syntaxhighlighter-evolved-plugin/ Description: Stored XSSCVSS Severity Score: 6.1 (Medium)CVSS Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:NAffected Software: SyntaxHighlighter EvolvedPlugin Slug: syntaxhighlighterAffected Version: 3.5.0Patched Version: 3.5.1 While doing a security audit of the plugins and themes we run on wordfence.com, I discovered a stored XSS vulnerability in SyntaxHighlighter Evolved. SyntaxHighlighter

More info:

https://www.wordfence.com/blog/2019/10/stored-xss-patched-in-syntaxhighlighter-evolved-plugin/