Security Advisory

CVE-2021-24373

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-06-21 19:18:20
Last updated 2024-08-03 19:28:23
Assigner WPScan
State PUBLISHED

Description

The WP Hardening – Fix Your WordPress Security WordPress plugin before 1.2.2 did not sanitise or escape the historyvalue GET parameter before outputting it in a Javascript block, leading to a reflected Cross-Site Scripting issue.