WordPress Mobile Plugin update

There’s a big update on the horizon but this is a security patch.

[code]foreach($_GET as $value => $get){
$_GET[”$value”] = htmlentities(htmlspecialchars(strip_tags($get)));
}
[/code]A hacking site today found a XSS vulnerability in the plugin, if you use my plugin please just add this under $mobile_plugin_version = ‘1.2′; and keep posted for a full update and version 1.3

Comments are closed.