CVE-2021-25085

The WOOF WordPress plugin before 1.2.6.3 does not sanitise and escape the woofredrawelements before outputing back in an admin page, leading to a Reflected Cross-Site Scripting...

WordPress plugin cross-site scripting vulnerability

WordPress is a set of blogging platforms developed by the WordPress Foundation using the PHP language. WordPress WOOF plugin has a cross-site scripting vulnerability in versions prior to 1.2.6.3, which stems from the lack of escaping of woofredrawelements and can be exploited by attackers to...

PT-2022-9641

Name of the Vulnerable Software and Affected Versions WOOF WordPress plugin versions prior to 1.2.6.3 Description The issue concerns a Reflected Cross-Site Scripting problem. It occurs because the woof redraw elements is not properly sanitised and escaped before being outputted back in an admin...