title: PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS
description: The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "php_id" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: PhoneTrack Meu Site Manager
vendor: Unknown
versions:
lessThanOrEqual: 0.1, status: affected, version: 0.1, versionType: custom
}