CVE-2021-24812

The BetterLinks WordPress plugin before 1.2.6 does not sanitise and escape some of imported link fields, which could lead to Stored Cross-Site Scripting issues when an admin import a malicious CSV...

CVE-2021-24812

The CVE-2021-24812 entry concerns the WordPress BetterLinks plugin (versions before 1.2.6). The vulnerability arises because imported link fields are not properly sanitised/escaped, enabling Stored Cross-Site Scripting when an admin imports a malicious CSV. Public details across sources confirm t...