CVE-2021-24921 Advanced Database Cleaner < 3.0.4 - Reflected Cross-Site Scripting

The Advanced Database Cleaner WordPress plugin before 3.0.4 does not sanitise and escape $GET keys and values before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...

CVE-2021-24921

The CVE-2021-24921 entry relates to the WordPress plugin Advanced Database Cleaner (before version 3.0.4). The underlying issue is that the plugin does not sanitize/escape $_GET keys and values before echoing them into attributes, enabling Reflected Cross-Site Scripting (XSS). Affected software: ...