Not rated
CVE-2021-24180 Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a…
Description
Unvalidated input and lack of output encoding within the Related Posts for WordPress plugin before 2.0.4 lead to a Reflected Cross-Site Scripting (XSS) vulnerability within the 'lang' GET parameter while editing a post, triggered when users with the capability of editing posts access a malicious URL.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Related Posts for WordPress 2.0 | earliest → < 2.0.4 | 2.0.4 |