medium6.1
CVE-2016-10895
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
Impact
The option-tree plugin before 2.6.0 for WordPress has XSS via an add_list_item or add_social_links AJAX request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Optiontree Project | Optiontree | before 2.6.0 |