2 matches found
CVE-2021-24424 WP Reset < 1.90 - Authenticated Stored XSS
The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extradata parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...
5.4AI score0.00629EPSS
SaveExploits2References2
CVE-2021-24424: Improper Neutralization of Input During Web Page Generation
The WP Reset – Most Advanced WordPress Reset Tool WordPress plugin before 1.90 did not sanitise or escape its extradata parameter when creating a snapshot via the admin dashboard, leading to an authenticated Stored Cross-Site Scripting issue...
5.4CVSS5.8AI score0.00629EPSS
SaveExploits2References3
20