New XSS Vulnerability | WordPress.org

Resolved Eric Karkovack
(@karks88)

10 months, 3 weeks ago

Patchstack is reporting a new XSS vulnerability in 3.2.3 and below:

https://patchstack.com/database/wordpress/plugin/idx-broker-platinum/vulnerability/wordpress-impress-for-idx-broker-plugin-3-2-3-cross-site-scripting-xss-vulnerability?_a_id=431

Any word on a patch?

Viewing 2 replies - 1 through 2 (of 2 total)

Greg Schueler
(@vegasb2k)

10 months ago

I am curious too if there is a patch coming soon. I am getting warnings on our Wordfence scans.
(Ref: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/idx-broker-platinum/impress-for-idx-broker-323-authenticated-contributor-stored-cross-site-scripting)

Thread Starter Eric Karkovack
(@karks88)

9 months, 2 weeks ago

Looks like 3.2.4 fixes this issue.

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘New XSS Vulnerability’ is closed to new replies.

3 replies
2 participants
Last reply from: Eric Karkovack
Last activity: 9 months, 2 weeks ago
Status: resolved