title: WP Cerber Security, Anti-spam & Malware Scan < 8.9.6 - Unauthenticated Stored Cross-Site Scripting
description: The WP Cerber Security, Anti-spam & Malware Scan WordPress plugin before 8.9.6 does not sanitise the $url variable before using it in an attribute in the Activity tab in the plugins dashboard, leading to an unauthenticated stored Cross-Site Scripting vulnerability.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: WP Cerber Security, Anti-spam & Malware Scan
vendor: Unknown
versions:
lessThan: 8.9.6, status: affected, version: 8.9.6, versionType: custom
}