Description
Insufficient escaping of participants' names in the participants page table resulted in a stored XSS risk when interacting with some features.
Remediation
References
Related Vulnerabilities
PHP Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2011-0754)
WordPress Plugin WP Athletics SQL Injection (1.1.7)
WebLogic CVE-2016-0675 Vulnerability (CVE-2016-0675)
WordPress Plugin ManageWP Worker Unspecified Vulnerability (4.1.7)
WordPress Plugin Error Log Viewer by BestWebSoft Cross-Site Scripting (1.0.5)