Unpatched XSS flaws and plugin removal
Known XSS and security flaws went unanswered for a long time, and the plugin was pulled from the directory pending review.
Tier II · Emerging Problems that are still building up.
3 public reports · first reported 6 March 2023 · last reported 3 May 2024
What's going wrong
Site owners report that a cross-site scripting vulnerability in the FareHarbor plugin remained open for a long time, and they asked publicly for a fix with no clear reply.
AI-assisted: written with the help of AI from the reports. The idea report has the full summary.
In the idea report
- The full summary.
- The products the 3 reports are about, and how many came each month.
- Related problems.
No business has been found with this problem yet, so the report has no contacts. All sales are final — no refunds. Pricing.