← Back

Any Hostname Project

any_hostname_project

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Any Hostname
any_hostname

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Any Hostname Project
1Any Hostname
Jun 17, 2026
Aug 2, 2021
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
The Any Hostname WordPress plugin through 1.0.6 does not sanitise or escape its "Allowed hosts" setting, leading to an authenticated stored XSS issue as high privilege users are able to set XSS payloads in it