My Content Management <= 1.7.1 - Cross-Site Scripting
Strategic Overview
Vulnerability Overview
The My Content Management plugin for WordPress may have been vulnerable to Cross-Site Scripting in versions less than or equal to 1.7.1. Version 1.7.2 of the plugin implemented extensive sanitization and escaping on user supplied inputs which means there may have been exploitable cross-site scripting vulnerabilities present in versions older than 1.7.2.
Technical Analysis
REMEDIATION: Update to version 1.7.2, or a newer patched version --- IDENTIFIER: CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')) The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
External References
Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C