Description
WordPress Plugin SAM Pro (Free Edition) is prone to a local file inclusion vulnerability because it fails to sufficiently verify user-supplied input. Exploiting this issue may allow an attacker to obtain sensitive information that could aid in further attacks. WordPress Plugin SAM Pro (Free Edition) version 1.9.6.67 is vulnerable; prior versions may also be affected.
Remediation
Update to plugin version 1.9.7.69 or latest
References
Related Vulnerabilities
Drupal Core 6.x Cross-Site Scripting (6.0 - 6.11)
WordPress Plugin Share and Follow 'admin.php' Cross-Site Scripting (1.80.3)
WordPress Plugin RSS Feed Reader 'rss_url' Parameter Cross-Site Scripting (0.1)
WordPress Plugin Placemarks Cross-Site Scripting (2.0.0)
Drupal Core 6.x Multiple Cross-Site Scripting Vulnerabilities (6.0 - 6.20)