title: System Dashboard < 2.8.10 - XSS via Header Injection
description: The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks
problem types: CWE-79 Cross-Site Scripting (XSS)
affected:
{
vendor: Unknown
product: System Dashboard
versions:
status: affected, versionType: semver, version: 0, lessThan: 2.8.10
defaultStatus: unaffected
}