Skip to content
Sign in
Not rated

CVE-2021-24346 The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being…

Description

The Stock in & out WordPress plugin through 1.0.4 has a search functionality, the lowest accessible level to it being contributor. The srch POST parameter is not validated, sanitised or escaped before using it in the echo statement, leading to a reflected XSS issue

Affected products and versions

Product Affected versions Fixed in
Stock in & out 1.0.4 No fix stated

Other CVEs of Stock in & out

The 2 CVEs of Stock in & out →
CVE-2021-24520 The Stock in & out WordPress plugin through 1.0.4 lacks proper sanitization before passing variables to an SQL… Not rated
Track this CVE