Patch Ticker

wpDiscuz WordPress comment plugin stored XSS flaw

Hidden malicious scripts in WordPress comments can hurt visitors.

Summary

The wpDiscuz WordPress comment plugin has a stored XSS flaw, so malicious scripts saved in comments can run in visitors' browsers. Versions through 7.6.73 are affected.

What to do

Update wpDiscuz to 7.6.74 or later.

Products and platforms

  • wpDiscuz

CVE IDs

Times

First published

First seen