Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/13 12:00 a.m.•9 views

CVE-2021-24954: Improper Neutralization of Input During Web Page Generation

The User Registration, Login Form, User Profile & Membership WordPress plugin before 3.2.3 does not sanitise and escape the ppressccdata parameter before outputting it back in an attribute of an admin dashboard page, leading to a Reflected Cross-Site Scripting issue...

6.1CVSS5.8AI score0.01EPSS
SaveExploits2References2
Rows per page
Query Builder