The Article Directory WordPress plugin through 1.3 does not properly sanitize the publish_terms_text setting before displaying it in the administration panel, which may enable administrators to conduct Stored XSS attacks in multisite contexts.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Article_directory | Article_directory_project | * | 1.3 (including) |