Lucene search

K
osvGoogleOSV:CVE-2021-24979
HistoryDec 27, 2021 - 11:15 a.m.

CVE-2021-24979

2021-12-2711:15:09
Google
osv.dev
5
cve-2021-24979
paid memberships pro
wordpress plugin
reflected cross-site scripting

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

45.2%

The Paid Memberships Pro WordPress plugin before 2.6.6 does not escape the s parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

45.2%