CVE-2021-25117

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is stil...

CVE-2021-25117 WP Postratings < 1.86.1 - Admin+ Stored Cross-Site Scripting

The WP-PostRatings WordPress plugin before 1.86.1 does not sanitise the postratingsimage parameter from its options page wp-admin/admin.php?page=wp-postratings/postratings-options.php. Even though the page is only accessible to administrators, and protected against CSRF attacks, the issue is stil...

CVE-2021-25117

CVE-2021-25117 affects the WP-PostRatings WordPress plugin prior to 1.86.1. The issue is that the plugin does not sanitize the postratings_image parameter on the options page (wp-admin/admin.php?page=wp-postratings/postratings-options.php). Although access is limited to administrators and CSRF-pr...