CVE-2021-25044

CVE-2021-25044 affects the WordPress plugin “Cryptocurrency Pricing list and Ticker” up to version 1.5. The vulnerability is a Reflected Cross‑Site Scripting (XSS) caused by the ccpw_setpage parameter not being properly sanitized/escaped before being echoed in shortcode pages. Exploitation would ...

CVE-2021-25044 Cryptocurrency Pricing list and Ticker <= 1.5 - Reflected Cross-Site Scripting

The Cryptocurrency Pricing list and Ticker WordPress plugin through 1.5 does not sanitise and escape the ccpwsetpage parameter before outputting it back in pages where its shortcode is embed, leading to a Reflected Cross-Site Scripting issue...