Knowledge Building (< 0.7.3)

The Knowledge Building WordPress plugin before 0.7.3 does not escape several user-supplied values before echoing them back in the response of an AJAX action available to unauthenticated users, leading to Reflected Cross-Site Scripting.

The Knowledge Building WordPress plugin before 0.7.3 does not sanitise and escape comments submitted through its reply feature, allowing unauthenticated users to perform Stored Cross-Site Scripting attacks against visitors and administrators.