Auth XSS Vulnerability, FIX?

+1. WP Defender plugin is also reporting this as a vulnerability. Any ETA on a fix?

We wouldn’t consider this a vulnerability, but if it was, it would not be serious vulnerability. The only users that could do what is suggested in that report are Editor and Administrator level users, both of whom would normally have the unfiltered_html capability, so they are specifically give the ability to use the equivalent of cross-site scripting (XSS). It would probably be more accurate to describe that as a bug.

If you think it is a vulnerability then you should notify the Plugin Directory about the security issue by sending an email to plugins [at] www.ads-software.com.

We’re with WhiteFir. It’s not a vulnerability.

Hey guys, thanks for the replies. No worries, will ignore the warnings ??