The Ditty WordPress plugin before 3.1.47 does not sanitise and escape some of its settings, which could allow high privilege users such as author to perform Stored Cross-Site Scripting attacks.
| Software | From | Fixed in |
|---|---|---|
| metaphorcreations / ditty | - | 3.1.47 |