CyberRota Analysis
AI-GeneratedThe If-So Dynamic Content WordPress plugin prior to version 1.10.2 is vulnerable due to inadequate sanitization and escaping of conversion names, enabling users with editor-level access to inject malicious JavaScript. This vulnerability can lead to cross-site scripting (XSS) attacks, potentially compromising the sessions of higher-privileged users who access the analytics page. WordPress site administrators and developers using this plugin should prioritize updating to the latest version to mitigate the risk.
Original NVD Description
The If-So Dynamic Content WordPress plugin before 1.10.2 does not sanitize a conversion name before storing it, nor escape it when rendering the analytics page, allowing users with editor-level access to store JavaScript that executes in the session of a higher-privileged user who views that page.