Cross-Site Scripting (XSS) vulnerability discovered by ThuraMoeMyint (Patchstack Red Team project) in WordPress Yasr – Yet Another Stars Rating plugin (versions <= 2.9.9).
Update the WordPress Yasr – Yet Another Stars Rating plugin to the latest available version (at least 3.0.0).
CPE | Name | Operator | Version |
---|---|---|---|
yet another stars rating | le | 2.9.9 |