4 matches found
CVE-2021-25085
creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-25085.yaml...
CVE-2021-25085
The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woofredrawelements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2021-25085
The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woofredrawelements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting...
CVE-2021-25085
CVE-2021-25085 (WOOF WordPress plugin) : The plugin before 1.2.6.3 does not sanitize/escape the woof_redraw_elements parameter, which is reflected back in an admin page, allowing a Reflected Cross-Site Scripting (XSS) attack. Affected component: the woof_redraw_elements output path in the admin c...