The Dokan WordPress plugin prior to 3.6.4 allows vendors to inject arbitrary javascript in product reviews, which may allow them to run stored XSS attacks against other users like site administrators.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
wedevs dokan |