Vulners
Lucene search
2 matches found
CVE-2021-25038
The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmussourceblog and wmusrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...
6.1CVSS6.4AI score0.0021EPSS
Exploits2References1
Cross site scripting
The WordPress Multisite User Sync/Unsync WordPress plugin before 2.1.2 does not sanitise and escape the wmussourceblog and wmusrecordperpage parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting issues...
4.3CVSS6.1AI score0.0021EPSS
Exploits2References1Affected Software1
20