CVE-2021-24509

The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvcstats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the...

CVE-2021-24509

The Page View Count WordPress plugin before 2.4.9 does not escape the postid parameter of pvcstats shortcode, allowing users with a role as low as Contributor to perform Stored XSS attacks. A post made by a contributor would still have to be approved by an admin to have the XSS triggered in the...

PT-2021-16031

Name of the Vulnerable Software and Affected Versions Page View Count WordPress plugin versions prior to 2.4.9 Description The issue allows users with a role as low as Contributor to perform Stored XSS attacks due to the lack of escaping of the postid parameter in the pvc stats shortcode. For...