6.4Mittel
Multiple Plugins <= (Various Versions) - Authenticated (Contributor+) Stored DOM-Based Cross-Site Scripting via Magnific Popups JavaScript Library
blossomthemes BlossomThemes Social Feed; sayful Carousel Slider; divisupreme Supreme Modules Lite – Divi Theme, Extra Theme and Divi Builder; robosoft Robo Gallery – Photo & Image Slider
Multiple plugins for WordPress are vulnerable to Stored Cross-Site Scripting via the plugin's bundled Magnific Popups library (version 1.1.0) in various versions due to insufficient input sanitization and output escaping on user supplied attributes. This make…