2021-08-09 10:04:06
WPScan
PUBLISHED
The Marmoset Viewer WordPress plugin before 1.9.3 does not property sanitize, validate or escape the id parameter before outputting back in the page, leading to a reflected Cross-Site Scripting issue.