EUVD-2021-11038

Malware in sbrugna...

CVE-2021-24124

Unvalidated input and lack of output encoding in the WP Shieldon WordPress plugin, version 1.6.3 and below, leads to Unauthenticated Reflected Cross-Site Scripting XSS when the CAPTCHA page is shown could lead to privileged escalation...

CVE-2021-24124

Affected software: WordPress WP Shieldon plugin (versions 1.6.3 and below). Vulnerability: Unauthenticated Reflected Cross‑Site Scripting caused by unvalidated input and lack of output encoding on the CAPTCHA page, due to $_SERVER['REQUEST_URI'] being echoed without encoding. Impact: could lead t...

WP Shieldon 1.6.3 - Unauthenticated Cross-Site Scripting (XSS)

The WP Shieldon WordPress plugin, versions 1.6.3 and below, were vulnerable to Unauthenticated Reflected Cross-Site Scripting XSS when the CAPTCHA page is shown. This was due to $SERVER'REQUESTURI' being echoed to a page without any encoding. PoC http://www.example.com/?...