CVE-2021-38333: Improper Neutralization of Input During Web Page Generation

The WP Scrippets WordPress plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $SERVER"PHPSELF" value in the /wp-scrippets.php file which allows attackers to inject arbitrary web scripts, in versions up to and including 1.5.1...

PT-2021-22052

Name of the Vulnerable Software and Affected Versions: WP Scrippets WordPress plugin versions up to and including 1.5.1 Description: The issue is related to Reflected Cross-Site Scripting, where a reflected $ SERVER"PHP SELF" value in the /wp-scrippets.php file allows attackers to inject arbitrar...