3 matches found
CVE-2021-24953
The Advanced iFrame WordPress plugin before 2022 does not sanitise and escape the aiconfigid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue...
CVE-2021-24953
The Advanced iFrame WordPress plugin before 2022 does not sanitise and escape the aiconfigid parameter before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting issue...
PT-2022-9526
Name of the Vulnerable Software and Affected Versions Advanced iFrame WordPress plugin versions prior to 2022 Description The issue is related to a Reflected Cross-Site Scripting problem. It occurs because the ai config id parameter is not properly sanitised and escaped before being outputted bac...