Cross Site Scripting (XSS) Vulnerability

Hi @originalbee

The XSS Vulnerability was fixed shortly after it was reported.

So you may enable the plugin.

Kind regards,
Vitaly

WordFence still shows this as having a security risk.

• This reply was modified 6 months, 1 week ago by GratefulDeb.

Hi @eventermom

Thank you for your input. For some reason I did not get the latest Wordfence/patchstack report reported. Only the previous ones. And for some reason there were not so much details how to reproduce it.

I tried my best to do the update based on my best judgement. Hopefully that I was correct and I patched the vulnerability the reporter had in mind.

Please let me know if you got any other feedback.

Kind regards,
Vitaly

Hi @originalbee and @eventermom

The vulnerability is fixed.

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/iframe

Please let me know if anything.

Kind regards,
Vitaly