CVE-2021-24241

The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page...

PT-2021-15784

Name of the Vulnerable Software and Affected Versions Advanced Custom Fields Pro WordPress plugin versions prior to 5.9.1 Description The issue is related to a reflected Cross-Site Scripting problem in the update settings page, caused by improper escaping of the generated update URL...

CVE-2021-24241: Improper Neutralization of Input During Web Page Generation

The Advanced Custom Fields Pro WordPress plugin before 5.9.1 did not properly escape the generated update URL when outputting it in an attribute, leading to a reflected Cross-Site Scripting issue in the update settings page...

WordPress Plugin Advanced Custom Fields Pro SQL Injection Vulnerability

WordPress is a set of WordPress Software Foundation's blogging platform developed using the PHP language, which supports personal blog sites on servers with PHP and MySQL. WordPress plugin Advanced Custom Fields Pro SQL injection vulnerability. The vulnerability is caused due to the program faili...