Lucene search

K
osvGoogleOSV:CVE-2021-24985
HistoryJan 24, 2022 - 8:15 a.m.

CVE-2021-24985

2022-01-2408:15:09
Google
osv.dev
7

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%

The Easy Forms for Mailchimp WordPress plugin before 6.8.6 does not sanitise and escape the field_name and field_type parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues

6.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

30.0%