Security Advisory

CVE-2021-25034

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-02-28 09:06:32

Last updated 2024-08-03 19:49:14

Assigner WPScan

State PUBLISHED

Description

The WP User WordPress plugin before 7.0 does not sanitise and escape some parameters in pages where the [wp_user] shortcode is used, leading to Reflected Cross-Site Scripting issues

← Browse all CVEs View on cve.org ↗