WordPress UserPro 4.9.32 - Cross-Site Scripting
WordPress UserPro 4.9.32 is vulnerable to reflected cross-site scripting because the Instagram PHP API (v2) it relies on allows it via the example/success.php error_description parameter.
instagram-php-apiPoC 已收录
CVSS6.1EPSS 41.2%