Skip to content
Not rated

CVE-2021-24632 The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting…

Description

The Recipe Card Blocks by WPZOOM WordPress plugin before 2.8.1 does not escape the message parameter before outputting it back in the admin dashboard, leading to a Reflected Cross-Site Scripting issue

Affected products and versions

Product Affected versions Fixed in
Recipe Card Blocks by WPZOOM 2.8 earliest → < 2.8.1 2.8.1
The 2 CVEs of Recipe Card Blocks by WPZOOM →
Track this CVE