title: Visitors <= 0.3 - Unauthenticated Stored Cross-Site Scripting (XSS)
description: The Visitors WordPress plugin through 0.3 is affected by an Unauthenticated Stored Cross-Site Scripting (XSS) vulnerability. The plugin would display the user's user agent string without validation or encoding within the WordPress admin panel.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: Visitors
vendor: Unknown
versions:
lessThanOrEqual: 0.3, status: affected, version: 0.3, versionType: custom
}