Not rated
CVE-2021-24723 The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing…
Description
The WP Reactions Lite WordPress plugin before 1.3.6 does not properly sanitize inputs within wp-admin pages, allowing users with sufficient access to inject XSS payloads within /wp-admin/ pages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| WP Reactions Lite 1.3 | earliest → < 1.3.6 | 1.3.6 |