title: Page Restriction WordPress < 1.2.7 - Admin+ Stored Cross-Site Scripting
description: The Page Restriction WordPress (WP) WordPress plugin before 1.2.7 allows bad actors with administrator privileges to the settings page to inject Javascript code to its settings leading to stored Cross-Site Scripting that will only affect administrator users.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Page Restriction WordPress (WP) – Protect WP Pages/Post
vendor: Unknown
versions:
lessThan: 1.2.7, status: affected, version: 1.2.7, versionType: custom
}