PT-2021-8575

Name of the Vulnerable Software and Affected Versions myCred WordPress plugin versions prior to 1.7.8 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the user parameter is not properly sanitised and escaped before being outputted in the Points Log...