CVE-2017-20008

The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2017-20008

creationtimestamp| type| source ---|---|--- 2021-11-29 12:33:02+00:00| seen| https://t.me/cibsecurity/33010...

CVE-2017-20008 myCRED < 1.7.8 - Reflected Cross-Site Scripting

The myCred WordPress plugin before 1.7.8 does not sanitise and escape the user parameter before outputting it back in the Points Log admin dashboard, leading to a Reflected Cross-Site Scripting...

CVE-2017-20008

Summary of CVE-2017-20008 : The WordPress plugin myCred (versions prior to 1.7.8) fails to sanitize and escape the user parameter before echoing it back in the Points Log admin dashboard, causing a reflected Cross-Site Scripting (XSS) vulnerability. Root cause: user input is not properly sanitize...