EUVD-2021-11490

Malware in sbrugna...

CVE-2021-24578: Improper Neutralization of Input During Web Page Generation

The SportsPress WordPress plugin before 2.7.9 does not sanitise and escape its matchday parameter before outputting back in the Events backend page, leading to a Reflected Cross-Site Scripting issue...