PT-2021-22067

Name of the Vulnerable Software and Affected Versions Custom Website Data WordPress plugin versions up to and including 2.2 Description The issue allows attackers to inject arbitrary web scripts via the id parameter in the /views/edit.php file, enabling Reflected Cross-Site Scripting attacks...

CVE-2021-38347: Improper Neutralization of Input During Web Page Generation

The Custom Website Data WordPress plugin is vulnerable to Reflected Cross-Site Scripting via the id parameter found in the /views/edit.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 2.2...