NewsmanApp: Stored Cross-Site Scripting via billing name fields
The NewsmanApp WordPress plugin up to and including version 3.7.29 does not properly sanitise or escape the billing first name and billing last name fields. An unauthenticated attacker can store malicious scripts that run in the browser of any user who opens an affected page. The flaw only applies when Newsman Remarketing is enabled and a non-empty Remarketing ID is configured.
Newsman · NewsmanApp
