2 matches found
CVE-2021-24424
The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extradata parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...
5.4CVSS6.1AI score0.00629EPSS
SaveExploits2References2
PT-2021-15954
Name of the Vulnerable Software and Affected Versions The WP Reset – Most Advanced WordPress Reset Tool version prior to 1.90 Description The issue is related to an authenticated Stored Cross-Site Scripting problem. This occurs because the extra data parameter is not properly sanitised or escaped...
5.4CVSS0.00629EPSS
SaveExploits2References5
20