Graphina charts plugin stored cross-site scripting exposes visitors
A WordPress chart plugin lets attackers plant code that steals visitors' data.
Summary
Insufficient input sanitization in the Graphina – Charts and Graphs For Elementor plugin lets unauthenticated attackers plant malicious scripts in pages. All versions up to and including 3.1.13 are affected.
What to do
Confirm the site runs a version newer than 3.1.13, and read the vendor's advisory.
Products and platforms
CVE IDs
Times
First published
First seen