title: WordPress User Avatar Plugin <= 1.4.11 is vulnerable to Cross Site Scripting (XSS)
description: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Enej Bajgoric / Gagan Sandhu / CTLT DEV User Avatar plugin <= 1.4.11 versions.
problem types: CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: user-avatar
product: User Avatar
vendor: Enej Bajgoric / Gagan Sandhu / CTLT DEV
versions:
lessThanOrEqual: 1.4.11, status: affected, version: n/a, versionType: custom
}