Beveiligingsadvies

CVE-2021-24871

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-12-13 10:41:15

Laatst bijgewerkt 2024-08-03 19:49:12

Toegewezen door WPScan

CVSS-score geen score

Status PUBLISHED

Beschrijving

The Get Custom Field Values WordPress plugin before 4.0.1 does not escape custom fields before outputting them in the page, which could allow users with a role as low as contributor to perform Cross-Site Scripting attacks

← Alle CVE's bekijken Bekijk op cve.org ↗