漏洞描述
The PublishPress Capabilities plugin for WordPress before 2.3.3 does not escape a form action URL before outputting it back in an attribute, leading to Reflected Cross-Site Scripting (XSS).
影响产品
修复建议
Update the PublishPress Capabilities plugin to version 2.3.3 or later.