RSS   Podatności dla 'Event geek'   RSS

2021-08-02
 
CVE-2021-24480

CWE-79
 

 
The Event Geek WordPress plugin through 2.5.2 does not sanitise or escape its "Use your own " setting before outputting it in the page, leading to an authenticated (admin+) stored Cross-Site Scripting issue

 


Copyright 2024, cxsecurity.com

 

Back to Top