CVE-2021-24679: Improper Neutralization of Input During Web Page Generation

The Bitcoin / AltCoin Payment Gateway for WooCommerce WordPress plugin before 1.6.1 does not escape the 's' GET parameter before outputting back in the All Masking Rules page, leading to a Reflected Cross-Site Scripting issue...

PT-2021-15853

Name of the Vulnerable Software and Affected Versions Mediumish WordPress theme versions 1.0.0 through 1.0.47 Description The search feature of the Mediumish WordPress theme does not properly sanitise its s GET parameter before outputting it back to the page, leading to a Cross-Site Scripting...