Medium 6.4
2025-06-13< 1.2.20
IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode
Minimum safe version
1.2.20
Update to 1.2.20 or later to address 3 fixable vulnerabilities
IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmeventlist' Shortcode
IRM Newsroom <= 1.2.19 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'irmcalendarview' Shortcode
WordPress IRM Newsroom Plugin <= 1.2.17 is vulnerable to Cross Site Scripting (XSS)