Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 7:21 p.m.•22 views

CVE-2021-24298

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS...

6.1CVSS6.8AI score0.03451EPSS
SaveExploits2References1
OSV
OSV
•added 2021/05/24 11:15 a.m.•17 views

CVE-2021-24298

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS...

6.1CVSS5.8AI score0.03451EPSS
SaveExploits2References2
NVD
NVD
•added 2021/05/24 11:15 a.m.•34 views

CVE-2021-24298

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS...

6.1CVSS0.03451EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/05/24 11:15 a.m.•12 views

CVE-2021-24298

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS...

6.1CVSS6.3AI score0.03451EPSS
SaveExploits2References4Affected Software1
CVE
CVE
•added 2021/05/24 10:58 a.m.•80 views

CVE-2021-24298

CVE-2021-24298 affects WordPress Simple Giveaways plugin versions before 2.36.2. The vulnerability is a reflected XSS in the Giveaway pages caused by unsanitized, unvalidated, and unescaped method and share GET parameters that are echoed back in the page output. Exploitation would allow an attack...

6.1CVSS6AI score0.03451EPSS
SaveExploits2References2Affected Software1
Mend
Mend
•added 2021/05/24 10:58 a.m.•4 views

CVE-2021-24298

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS...

6.1CVSS0.03451EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/24 12:00 a.m.•11 views

CVE-2021-24298: Improper Neutralization of Input During Web Page Generation

The method and share GET parameters of the Giveaway pages were not sanitised, validated or escaped before being output back in the pages, thus leading to reflected XSS...

6.1CVSS5.8AI score0.03451EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/05/24 12:00 a.m.•5 views

PT-2021-15835

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue arises from the method and share GET parameters of the Giveaway pages not being sanitised, validated, or escaped before being output back in the...

6.1CVSS0.03451EPSS
SaveExploits2References5
Rows per page
Query Builder