CVE-2021-24283

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue...

CVE-2021-24287

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24286

The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

PT-2021-15825

Name of the Vulnerable Software and Affected Versions Redirect 404 to parent WordPress plugin versions prior to 1.3.1 Description The issue is related to a reflected Cross-Site Scripting problem. The settings page of the plugin did not properly sanitise the tab parameter before outputting it back...

PT-2021-15826

Name of the Vulnerable Software and Affected Versions Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin versions prior to 1.3.2 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the settings page of the plugin did...

PT-2021-15823

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue is related to a reflected XSS problem. The tab GET parameter of the settings page is not sanitized or escaped when being output back in an HTML attribute, leading to this...

CVE-2021-24287: Improper Neutralization of Input During Web Page Generation

The settings page of the Select All Categories and Taxonomies, Change Checkbox to Radio Buttons WordPress plugin before 1.3.2 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24286: Improper Neutralization of Input During Web Page Generation

The settings page of the Redirect 404 to parent WordPress plugin before 1.3.1 did not properly sanitise the tab parameter before outputting it back, leading to a reflected Cross-Site Scripting issue...

WPScan WordPress security plugin 跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . A cross-site scripting vulnerability exists in wpscan tha...

CVE-2021-24274

The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24276

The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24275

The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24274

The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24275

The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24276

The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

PT-2021-15815

Name of the Vulnerable Software and Affected Versions The Popup by Supsystic WordPress plugin versions prior to 1.10.5 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the tab parameter of the plugin's options page is not properly sanitized before...

PT-2021-15814

Name of the Vulnerable Software and Affected Versions The Ultimate Maps by Supsystic WordPress plugin versions prior to 1.2.5 Description The issue is related to a reflected Cross-Site Scripting problem. It occurs because the tab parameter of the plugin's options page is not properly sanitized...

CVE-2021-24274: Improper Neutralization of Input During Web Page Generation

The Ultimate Maps by Supsystic WordPress plugin before 1.2.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24276: Improper Neutralization of Input During Web Page Generation

The Contact Form by Supsystic WordPress plugin before 1.7.15 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...

CVE-2021-24275: Improper Neutralization of Input During Web Page Generation

The Popup by Supsystic WordPress plugin before 1.10.5 did not sanitise the tab parameter of its options page before outputting it in an attribute, leading to a reflected Cross-Site Scripting issue...