high7.5
CVE-2017-18545
The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.
Impact
The invite-anyone plugin before 1.3.16 for WordPress has incorrect escaping of untrusted Dashboard and front-end input.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Invite Anyone Project | Invite Anyone | before 1.3.16 |