CVE-2017-18545

The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-08-16

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Invite Anyone (Invite Anyone Project)

References

• https://wordpress.org/plugins/invite-anyone/#developers