CVE-2021-24534

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "phpid" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue...

CVE-2021-24534

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "phpid" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue...

CVE-2021-24534 PhoneTrack Meu Site Manager <= 0.1 - Authenticated Stored XSS

The PhoneTrack Meu Site Manager WordPress plugin through 0.1 does not sanitise or escape its "phpid" setting before outputting it back in an attribute in the page, leading to a stored Cross-Site Scripting issue...

CVE-2021-24534

The CVE concerns the WordPress plugin PhoneTrack Meu Site Manager (v0.1 and earlier). The vulnerability is a stored XSS caused by failing to sanitise/escape the php_id setting when it is echoed back in an HTML attribute, allowing injected scripts to persist in pages. Explanatory payloads are show...