CVE-2021-39325

The OptinMonster WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to insufficient input validation in the loadpreviews function found in the /OMAPI/Output.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.6.0...

PT-2021-22533

Name of the Vulnerable Software and Affected Versions: OptinMonster WordPress plugin versions up to and including 2.6.0 Description: The issue is related to Reflected Cross-Site Scripting due to insufficient input validation in the load previews function found in the /OMAPI/Output.php file. This...

WordPress plugin cross-site scripting vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on PHP and MySQL servers.WordPress Plugin is an open source application plugin for WordPress. A cross-site scripting vulnerability exists in the...