CVE-2021-24617

The GamePress WordPress plugin through 1.1.0 does not escape the opedit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues...

CVE-2021-24617

CVE-2021-24617 affects the WordPress GamePress plugin up to version 1.1.0. The vulnerability is a Reflected Cross-Site Scripting (XSS) flaw caused by failing to escape the op_edit POST parameter before echoing it in several Game Option pages, enabling execution of injected JavaScript. Exploitatio...

CVE-2021-24617 GamePress <= 1.1.0 - Reflected Cross-Site Scripting

The GamePress WordPress plugin through 1.1.0 does not escape the opedit POST parameter before outputting it back in multiple Game Option pages, leading to Reflected Cross-Site Scripting issues...