CVE-2021-24676

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24676 Better Find and Replace < 1.2.9 - Reflected Cross-Site Scripting

The Better Find and Replace WordPress plugin before 1.2.9 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

CVE-2021-24676

CVE-2021-24676 affects the WordPress plugin Better Find and Replace up to version 1.2.8 (vulnerability exists before 1.2.9). The flaw is a Reflected Cross-Site Scripting (XSS) where the GET parameter 's' is not properly escaped before being echoed on the All Masking Rules page. Root cause: inadeq...