CVE-2021-24477

The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its options, allowing the issue to be exploited via ...

PT-2021-16000

Name of the Vulnerable Software and Affected Versions Migrate Users WordPress plugin versions prior to 1.1.2 is not specified, however, the plugin through 1.0.1 is affected. Description The issue is related to a Stored Cross-Site Scripting problem. This occurs because the Delimiter option is not...

CVE-2021-24477: Improper Neutralization of Input During Web Page Generation

The Migrate Users WordPress plugin through 1.0.1 does not sanitise or escape its Delimiter option before outputting in a page, leading to a Stored Cross-Site Scripting issue. Furthermore, the plugin does not have CSRF check in place when saving its options, allowing the issue to be exploited via ...